curl-library
ALERT: broken HTTPS over HTTP proxy
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Wed, 20 Apr 2011 23:14:59 +0200 (CEST)
Date: Wed, 20 Apr 2011 23:14:59 +0200 (CEST)
Hiya
In case you missed the context of the previous mail I sent: libcurl 7.21.5
will not speak HTTPS over a HTTP proxy!
The fix is most probably this:
https://github.com/bagder/curl/commit/c2c89481909de99e37f4aee46c8bc1b1358a5988
I'll give it some further thoughts before I decide (and I am interested in
your ideas and opinions) but I figure this bug might be big enough to warrant
a rather quick follow-up release.
How could this bug slip in to the release? The sad reality is that we have no
test cases for CONNECT + HTTPS because we use the same server for CONNECT as
for HTTP(S). I guess it is time we ramp up the work to correct this, and fire
up a second server instance for this test setup.
Sorry for this guys.
-- / daniel.haxx.se ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2011-04-20