cURL / Mailing Lists / curl-library / Single Mail

curl-library

ALERT: broken HTTPS over HTTP proxy

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Wed, 20 Apr 2011 23:14:59 +0200 (CEST)

Hiya

In case you missed the context of the previous mail I sent: libcurl 7.21.5
will not speak HTTPS over a HTTP proxy!

The fix is most probably this:

https://github.com/bagder/curl/commit/c2c89481909de99e37f4aee46c8bc1b1358a5988

I'll give it some further thoughts before I decide (and I am interested in
your ideas and opinions) but I figure this bug might be big enough to warrant
a rather quick follow-up release.

How could this bug slip in to the release? The sad reality is that we have no
test cases for CONNECT + HTTPS because we use the same server for CONNECT as
for HTTP(S). I guess it is time we ramp up the work to correct this, and fire
up a second server instance for this test setup.

Sorry for this guys.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2011-04-20