On Wed, 2019-07-31 at 11:32 +0000, Jochen Wiedmann wrote: > > On 2019/07/31 10:48:37, Oleg Kalnichevski <ol...@apache.org> wrote: > > > I am confused now. HttpClient always uses plain HTTP to connect to > > the > > first proxy hop. It upgrades to TLS only once the connection to the > > request target has been fully established. Naturally all CONNECT > > messages get transmitted in clear text on the wire. > > Well, what I am observing, does sound like a CONNECT, which is done > in okain HTTP, possibly followed by an "upgrade to TLS" (assuming > that would mean the SSL negotiation with the remote server within the > established plain text tunnel), doesn't it? >
It does. It is precisely what HTTP agents are expected to do per RFC2817: https://tools.ietf.org/html/rfc2817 Oleg --------------------------------------------------------------------- To unsubscribe, e-mail: httpclient-users-unsubscr...@hc.apache.org For additional commands, e-mail: httpclient-users-h...@hc.apache.org
