Re: [squid-users] Squid proxychains problem

2018-03-28 Thread Amos Jeffries
On 29/03/18 02:34, Thomas Schmiedl wrote:
> Hello,
> 
> I use xupnpd2 (http://xupnpd.org/xupnpd2_en.html) on my MIPS-based
> router to restream some HLS-streams from the internet to my TV. This app
> doesn't support https and has no proxy support. The author doesn't want
> to provide a newer version of xupnpd2.
> 

Well that sucks. Do you have any alternatives?


> I try to restream webcams from Skyline-webcams (e.g.
> http://www.skylinewebcams.com/de/webcam/czech-republic/prague/prague/old-town-bridge-tower.html),
> which uses https. But it's possible to receive the m3u8-file (the URL
> including query-string is in old-town-bridge-tower.html) in http. The
> m3u8-file contains https URLs (ts-video-files, which also can downloaded
> in http).
> 
> My idea is to use a filter proxy to replace the https URLs in the
> m3u8-file by http URLs. I use Squid 3.5.12 in Ubuntu 16 with these
> eCap-sample-adapter to replace "https" by "http" in the server response:
> http://www.e-cap.org/docs/ (victim=https and replacement=http).
> 
> A first test with a local http-server worked (URLs were replaced):
> curl --proxy 127.0.0.1:3128 http://192.168.178.25:8080/live.m3u8
> 

What I'm not clear on is why you think you need proxychains? a simple
DNAT intercept should do.

The eCAP plugin sounds like it is handling the embedded URL issues that
occur with re-writing for the xupnpd2 response traffic. All you should
need is a way to convert the http:// request URLs from xupnpd2 back into
https:// ones - in theory the eCAP adapter should do both alterations so
they reliably match up, otherwise a URL-rewrite helper can do this later
part.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] Squid proxychains problem

2018-03-28 Thread Thomas Schmiedl

Hello,

I use xupnpd2 (http://xupnpd.org/xupnpd2_en.html) on my MIPS-based 
router to restream some HLS-streams from the internet to my TV. This app 
doesn't support https and has no proxy support. The author doesn't want 
to provide a newer version of xupnpd2.


I try to restream webcams from Skyline-webcams (e.g. 
http://www.skylinewebcams.com/de/webcam/czech-republic/prague/prague/old-town-bridge-tower.html), 
which uses https. But it's possible to receive the m3u8-file (the URL 
including query-string is in old-town-bridge-tower.html) in http. The 
m3u8-file contains https URLs (ts-video-files, which also can downloaded 
in http).


My idea is to use a filter proxy to replace the https URLs in the 
m3u8-file by http URLs. I use Squid 3.5.12 in Ubuntu 16 with these 
eCap-sample-adapter to replace "https" by "http" in the server response: 
http://www.e-cap.org/docs/ (victim=https and replacement=http).


A first test with a local http-server worked (URLs were replaced):
curl --proxy 127.0.0.1:3128 http://192.168.178.25:8080/live.m3u8

But with proxychains it doesn't work:
proxychains curl http://192.168.178.25:8080/live.m3u8

I also contacted the author of proxychains. He replied, I should use 
sniffing, but I have no sniffing experience.


Maybe someone in this mailing-list could help me?

Best regards,
Thomas
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users