From users-return-7936-archive-asf-public=cust-asf.ponee.io@trafficserver.apache.org Tue Dec 24 17:43:28 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 018D618065E for ; Tue, 24 Dec 2019 18:43:27 +0100 (CET) Received: (qmail 73033 invoked by uid 500); 24 Dec 2019 17:43:27 -0000 Mailing-List: contact users-help@trafficserver.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@trafficserver.apache.org Delivered-To: mailing list users@trafficserver.apache.org Received: (qmail 73023 invoked by uid 99); 24 Dec 2019 17:43:27 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 24 Dec 2019 17:43:27 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 6D6FF180C32 for ; Tue, 24 Dec 2019 17:43:26 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.851 X-Spam-Level: X-Spam-Status: No, score=0.851 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, KAM_ASCII_DIVIDERS=0.8, NUMERIC_HTTP_ADDR=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id 9q-RPmDfK7sK for ; Tue, 24 Dec 2019 17:43:25 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.221.179; helo=mail-vk1-f179.google.com; envelope-from=jp557198@gmail.com; receiver= Received: from mail-vk1-f179.google.com (mail-vk1-f179.google.com [209.85.221.179]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 1B4B3BC509 for ; Tue, 24 Dec 2019 17:43:25 +0000 (UTC) Received: by mail-vk1-f179.google.com with SMTP id w67so5267907vkf.1 for ; Tue, 24 Dec 2019 09:43:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=5hlpvIiOEjLg9gKavw5qsP7eXcqRHF93KY3WM9LOIDU=; b=imJtjZjqs51dMaSH+g7o8sWC/BanFkELuVCVL8L3rbyfZYrmKnpVQror1t5yXNJVKY 3TI1OiE+dzNG9b/ZL3JAovO9n4i7wBZTaKvd4IViZw3uWd07wrMcMbOiAArAECsS1nYq kLkH0Ey/kYnrBm5rwnlOcy8IHoFIAsYqsyQmfhL5bD01vQWguVnlbtF1h93hg8L3mWkr 3FT5axDJcBh9fOvvi3ny03FFU45U31YsqqC5WBUqp2C4M+g8lIVuMuRDcjnYSU7cDPyS vFNxolPEKN1PI/s55f1yIRdLaHvdvHgowMt4G+bg1BLwCTPXEhMAlAmG2kZut9/SxGpx aoaw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=5hlpvIiOEjLg9gKavw5qsP7eXcqRHF93KY3WM9LOIDU=; b=VUbLAAnNajJFRuoSc28jhvXVmQwp/8gMcjnPaJZuZhVjFhJlegJCK4JhNnbwwx3ERC ezguedBUQIBndVwj2/j9HhM03n6+skddJWx1gZbZL8N8a9W2z5d+Tt1IJfBOm2EyDLqJ OM66mvkpk/0rcK871Jm5lt8HhEtDp/b1rVbgxcOpQ8GUkisrB3JZVnYFcEkGBpFqIbY7 cQ5qv0zrHXap/i15XApsxONR23aT8f7sN8tc7H1OfeeUmcaiqkPjdTXsuGeUq99Ui2jn wB7sEHwO5S3SeO+IAqbcAoMP849wWJsPOLJK5H5YMU9JTCJYD8PHiaG/b22ULrLG2LR6 fzig== X-Gm-Message-State: APjAAAVTt72eNbAygm+Bixm0yh1jS91p8ZJcs5SapOKFnqQw67FHNyY2 PeaLbe0aT4UWvowyT0e9TGhKQEAGwY/6OsU6yignajc4 X-Google-Smtp-Source: APXvYqzVR0yGs0chc47dJW6ulSl6PPF5Fg9lbDHIeqrnfJ+3mbKsmdvyhbLfWiyLbbkbsu372yEpYpAVmbWhccFYAZA= X-Received: by 2002:a05:6122:11a6:: with SMTP id y6mr22385498vkn.32.1577209404256; Tue, 24 Dec 2019 09:43:24 -0800 (PST) MIME-Version: 1.0 References: <1577209922262-0.post@n7.nabble.com> In-Reply-To: <1577209922262-0.post@n7.nabble.com> From: Jeremy Payne Date: Tue, 24 Dec 2019 11:43:12 -0600 Message-ID: Subject: Re: HTTPS forward proxy - CONNECT aborted To: users@trafficserver.apache.org Content-Type: text/plain; charset="UTF-8" try this.. export http_proxy="http://172.24.0.8:80/" export https_proxy="http://172.24.0.8:80/" curl -vvv https://c23-ngxorg-01/assets/sintel/vod/250kbit.m3u8 On Tue, Dec 24, 2019 at 11:41 AM ezko wrote: > > Hi, > we are use ATS 8.0.5 as forward proxy. > it works fine with HTTP , but fails with Proxy CONNECT aborted for HTTPS. > what are we missing ? > Thanks, > erez > > > using exports for curl: > export http_proxy="http://172.24.0.8:80/" > export https_proxy="https://172.24.0.8:443/" > > curl -vvv https://c23-ngxorg-01/assets/sintel/vod/250kbit.m3u8 > > * About to connect() to proxy 172.24.0.8 port 443 (#0) > * Trying 172.24.0.8... > * Connected to 172.24.0.8 (172.24.0.8) port 443 (#0) > * Establish HTTP proxy tunnel to c23-ngxorg-01:443 > > CONNECT c23-ngxorg-01:443 HTTP/1.1 > > Host: c23-ngxorg-01:443 > > User-Agent: curl/7.29.0 > > Proxy-Connection: Keep-Alive > > > * Proxy CONNECT aborted > * Closing connection 0 > curl: (56) Proxy CONNECT aborted > > _____________________________________________________________________ > _____________________________________________________________________ > > for HTTP , it works as expected: > > curl -vvv http://c23-ngxorg-01/assets/sintel/vod/250kbit.m3u8 > > * About to connect() to proxy 172.24.0.8 port 80 (#0) > * Trying 172.24.0.8... > * Connected to 172.24.0.8 (172.24.0.8) port 80 (#0) > > GET http://c23-ngxorg-01/assets/sintel/vod/250kbit.m3u8 HTTP/1.1 > > User-Agent: curl/7.29.0 > > Host: c23-ngxorg-01 > > Accept: */* > > Proxy-Connection: Keep-Alive > > > < HTTP/1.1 200 OK > < Server: ATS/8.0.5 > < Date: Tue, 24 Dec 2019 17:34:51 GMT > < Content-Type: application/vnd.apple.mpegurl > < Content-Length: 2993 > < Last-Modified: Sun, 01 Dec 2019 17:44:00 GMT > < ETag: "5de3fbe0-bb1" > < Accept-Ranges: bytes > < Age: 0 > < Proxy-Connection: keep-alive > < Via: http/1.1 c23-atmid-01 (ApacheTrafficServer/8.0.5 [uScMsSfWpSeN:t cCMp > sS]) > < > > > > > -- > Sent from: http://apache-traffic-server.24303.n7.nabble.com/