[Xymon] Proxy HTTPS requests don't use CONNECT

[Jeremy Laidman]

Nicola

I think you're out of luck on this one. The proxy test is probably intended
to test that the proxy is working, not that the end-point URL is working,
and consequently is not a full implementation. I note that the docs/TODO
file in v4.3.30 shows:

> * https proxying (proxy CONNECT protocol)

which suggests that CONNECT is not implemented.

Cheers
Jeremy


On Mon, 29 Jun 2020 at 19:31, Nicola <canne74 at gmail.com> wrote:

> Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or
> 4.3.28: I have 2 servers in manual failover).
> * I added the `--bb-proxy-syntax` flag to the [xymonnet] section of
> tasks.cfg
> * I added a line with "1.1.1.1   proxy # testip
> http://1.1.1.1:3128/https://github.com/" to hosts.cfg
> * I spun up a tcpdump, and I see requests coming as "GET
> https://github.com/ HTTP/1.1" instead of the expected "CONNECT
> github.com:443"
>
> The error page states:
>
>> https://www.github.com/ - Not Implemented
>>
>>
> If I use "https" as the protocol for the proxy part, I get
>
>> https://github.com/ - SSL error
>>
>
> and
>
> Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1:
>> error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
>>
> in the log
> (of course I cannot read the request through tcpdump)
>
> Is there anything I am missing?
>
> Thank you
>
> --
> Nicola
>
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20200706/99774f35/attachment.htm>