All Questions
18
questions
0
votes
1
answer
86
views
Why squid deny the https request but allow the same site with http request?
I want to allow dev just use github copilot and deny other request.
According to github info:
https://docs.github.com/en/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-...
0
votes
0
answers
356
views
Squid transparent proxy for HTTPS requests that have been redirected by DNAT rule
I would like to look into suspicious activity of possibly infected web application in my network. I wanted to use squid to intercept https requests with https_port directive.
My network setup:
http/...
2
votes
1
answer
5k
views
curl -- via proxy -- how to ignore self signed certificate
I can access insecure sites:
curl -k https://self-signed.badssl.com
I can access a site with mitmproxy:
curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com
...
0
votes
1
answer
367
views
Nginx as Web Proxy fails on https
I have been trying to configure nginx to act as a web proxy (like squid) to be able to modify headers. It is working with http, but https shows "Server not found". Also, I can access directly with the ...
0
votes
0
answers
99
views
What are the ways to unwrap HTTPS in proxy-like way using standard tools?
For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
6
votes
2
answers
2k
views
OpenBSD relay, https proxy for multiple domains
I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
3
votes
0
answers
336
views
How to offload TLS client certificate authentication to a simple proxy
I have a web application that is accessible only through HTTPS with client certificate authentication. I need to run some analysis tools which don't cope well with client certificate authentication. A ...
0
votes
1
answer
846
views
Sniffing https/http traffic from entire OS with mitmproxy
I'm using debian 8, and i want to capture all the traffic from it. So i installed mitmproxy on the same os on which i want to capture https, and i set up in the 'network->wifi->http proxy and https ...
2
votes
0
answers
426
views
Set up a proxy for Simplenote
At work I have a proxy. When I configure it in Linux everything goes perfectly. But now I'm starting to an app call Simplenote that doesn't have a proxy option, so it's not working. What I would like ...
0
votes
1
answer
5k
views
can not access HTTP site with squid3
I have a problem here,
i have installed squid3 but it cant access http site like http://kompas.com , but it can access https like https://google.com
here is my squid.conf
#acl localnet src 192.168....
3
votes
0
answers
1k
views
How to pass an HTTPS scheme request to a proxy without using a CONNECT tunnel on FreeBSD?
The client (C) pass through a proxy (P) to contact a server (S):
A --http--> P --https--> S
I need the proxy to be able to investigate the request content, for this I see two options:
SSL ...
4
votes
0
answers
10k
views
Transparent HTTPS Squid proxy with upstream parent
I've got a network without direct internet access where I have Squid 3.5.9 as a transparent proxy listening on tcp/8080 for HTTP and on tcp/8443 for HTTPS (redirected via iptables from tcp/80 and tcp/...
0
votes
1
answer
2k
views
Detect HTTPS Post Request Body (and JSON-Body)
I have a program which communicates with a server via an JSON-API.
Basically what it is doing is sending POST requests to https: // myserver / json with a json-file within the POST body.
I need a way ...
2
votes
2
answers
17k
views
Pages don't get blocked with Squid over HTTPS
I have set up Squid to block pages on my own system (i.e not on a network), and I'm trying to get SSL to work with page blocking. To this end, I've set up ssl-bump and installed the certificate to my ...
6
votes
1
answer
5k
views
cURL does not recognize certificate
At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.)
...