Re: [or-cvs] add support for CONNECTing through https proxies.

[Ben Laurie <ben@xxxxxxxxxxxxx>]

Nick Mathewson wrote:
> On Thu, Feb 24, 2005 at 05:56:58AM -0500, Roger Dingledine wrote:
>
> > Update of /home2/or/cvsroot/tor/src/or
> > In directory moria.mit.edu:/home2/arma/work/onion/cvs/tor/src/or
> >
> > Modified Files:
> > 	config.c connection_or.c directory.c or.h 
> > Log Message:
> > add support for CONNECTing through https proxies.
> > not sure if it works. i don't have an https proxy.
>
>
> Somebody should try this.  I don't see how it could work: if I'm
> following correctly, the code will check the proxy's certificate
> against the keys it expects to get from the OR, and reject it.

CONNECT passes the connection through directly (i.e. with termination), 
so if you code this right, it _should_ work.

I didn't look at the code.

--
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff