On Wed, 2019-07-31 at 10:29 +0000, Jochen Wiedmann wrote:
> 
> On 2019/07/31 10:06:40, Oleg Kalnichevski <ol...@apache.org> wrote: 
> 
> > This is depends on the connection route defined by the route
> > planner.
> > If the connection route in marked as secure HttpClient will attempt
> > to
> > establish a tunnel through the proxy (by way of CONNECT request)
> > instead of passing the request the the proxy for execution. All
> > connection routes that use HTTPS scheme are considered secure by
> > default. 
> > 
> > Make sure the request you are trying to execute has been configured
> > to
> > use HTTPS.
> 
> Thanks very much, Oleg. In retrospective, there is one thing that
> puzzles me, and which you might be able to explain. I understand,
> that I can onfigure the HttpClient to use SSL for connecting to the
> proxy. But, if that is what SoapUI does: Why can I read the http
> headers of the CONNECT in plain text?
> 

I am confused now. HttpClient always uses plain HTTP to connect to the
first proxy hop. It upgrades to TLS only once the connection to the
request target has been fully established. Naturally all CONNECT
messages get transmitted in clear text on the wire.

Oleg   


> Thanks,
> 
> Jochen
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscr...@hc.apache.org
> For additional commands, e-mail: httpclient-users-h...@hc.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscr...@hc.apache.org
For additional commands, e-mail: httpclient-users-h...@hc.apache.org

Reply via email to