[Xymon] Proxy HTTPS requests don't use CONNECT

Nicola canne74 at gmail.com
Mon Jun 29 11:31:27 CEST 2020


Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or
4.3.28: I have 2 servers in manual failover).
* I added the `--bb-proxy-syntax` flag to the [xymonnet] section of
tasks.cfg
* I added a line with "1.1.1.1   proxy # testip
http://1.1.1.1:3128/https://github.com/" to hosts.cfg
* I spun up a tcpdump, and I see requests coming as "GET https://github.com/
HTTP/1.1" instead of the expected "CONNECT github.com:443"

The error page states:

> https://www.github.com/ - Not Implemented
>
>
If I use "https" as the protocol for the proxy part, I get

> https://github.com/ - SSL error
>

and

Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1:
> error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
>
in the log
(of course I cannot read the request through tcpdump)

Is there anything I am missing?

Thank you

-- 
Nicola
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20200629/b8cd7802/attachment.htm>


More information about the Xymon mailing list