Verify against the target host instead of proxy host #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
* When proxying, the `host` is set to the host of the proxy instead of the target * The certs being verified are from the target, not the proxy. So when the verification check happens it fails, because the certs do not match the proxy * This is not an ideal solution, but it was the only exposed uri I could find that contained the target host, from inside of the http stub connection
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Use the parent uri, which has the target host
When proxying, the
hostis set to the host of the proxy instead of the targetThe certs being verified are from the target, not the proxy. So when the verification check happens it fails, because the certs do not match the proxy
This is not an ideal solution, but it was the only exposed uri I could find that contained the target host, from inside of the http stub connection