You need to open a socket to the proxy server and send it an HTTP
CONNECT request.

If the proxy server sends back an OK reply, then it has opened a socket
to the proxy.  After that the proxy acts as a port forwarder, so you can
continue your SSL dialog with the proxy as if it was the SSL server.

You should be able to Google the details.

G.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andrey Petrashenko
Sent: 27 February 2008 12:32
To: openssl-users@openssl.org
Subject: Re: OpenSSL client through proxy

Excuse me that my question is too much general. 
The situation is like this: I have a client computer in a local network
that is behind proxy server so it can not see a SSLServer directly. The
SSL server is in Internet area. The type of proxy server is HTTP proxy.
The task is a SSL data communication between local client and internet
SSL-server. SSL port at the server is opened (without proxy). Of course,
I'm using OpenSSL library.
The SSL client trying to connect using "BIO_set_conn_hostname(bio,
server_host_port)". Thus, I need to find appropriate functions in the
OpenSSL library to setup proxy configuration for the client... or find
other solution.


27.02.08, 12:32, "David Schwartz" <[EMAIL PROTECTED]>:

> > 26.02.08, 23:23, [EMAIL PROTECTED]:
> >
> > > Hello,
> > > > I have to connect to my OpenSSL server through proxy server.
> > How can I
> > > establish this connection?
> > > Establish tcp connection through proxy (connect, socks5, 
> > > transparent, reverse or any other) and next run SSL on this tcp 
> > > connection.
> > > Best regards,
> > > --
> > > Marek Marcola <[EMAIL PROTECTED]>
> >
> > Thanks for the answer. I'm a newbie in TCP/SSL programming. Would 
> > you suggest any library or function names to use "connect" or 
> > "transparent". May be it is supported by OpenSSL?.. or another C/C++

> > library.
> Could you give us some kind of idea what it is you are trying to do so

> that we can give you more precise instructions? Is the proxy being 
> used by the server or the client? What kind of proxy? Do you have a 
> proxy or need a proxy? If you have a proxy, what kind of proxy? If you
need a proxy, why?
> You are straining everyone's ESP here.
> DS
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to