HTTPProxy and Https://

Simon · Post by **Simon** » Fri Oct 23, 2009 3:13 pm

Hello,
I am having some trouble with setting the HTTPProxy then making a put url "https://...". It results in a "Invalid Host" error.
Wireshark shows it as using DNS protocol but when I drop it to put url "http://..." I see it as TCP protocol, so no problem with set HTTPProxy portion of it.

Anybody have any ideas about this?

Thanks,
Simon

Philhold · Post by **Philhold** » Fri Oct 23, 2009 4:18 pm

Hi Simon,

What version of Revolution are you using? My understanding is that only "Enterprise" supports https. Could that cause the issue?

Cheers

Phil

Simon · Post by **Simon** » Fri Oct 23, 2009 4:23 pm

Hi Phil,
I'm on Enterprise, so no trouble there.

Simon

Simon · Post by **Simon** » Sat Oct 24, 2009 2:29 pm

I guess my real question is:
Does HTTPProxy only work with HTTP servers?

From the docs.
"Use the HTTPProxy property to use HTTP servers from behind a firewall."
Which says nothing about HTTPS.

Simon

trevordevore · Post by **trevordevore** » Sat Oct 24, 2009 4:54 pm

I'm not sure that the httpproxy is used with https. If you edit the script of the revliburl button on the revlibrary stack search or the line:

## for now don't allow https connections through proxies

It appears that proxy servers are bypassed for https urls. I've never fully investigated however.

Philhold · Post by **Philhold** » Sat Oct 24, 2009 5:24 pm

I don't see how https could work through a proxy as the encryption/decryption works directly between one browser and one server. I guess that it would be possible to create a secure tunnel through a proxy but that sounds a bit technical.

Are you sure that your firewall is blocking https port 443 traffic? In other words have you tried your script without httpproxy?

Cheers

Phil

Simon · Post by **Simon** » Sat Oct 24, 2009 5:55 pm

Thanks again Trevor, will look that up, every client a different proxy issue.

Hi Phil,
Actually the client is using port 2010. Pharmaceutical company so security is tight. Yes, I have tried it without setting the proxy, still get an "Invalid Server" result.

Simon

Philhold · Post by **Philhold** » Sat Oct 24, 2009 6:17 pm

Hi Simon,

I think that you'll have to Google "https tunnel". I think it is going to be a tad involved.

Cheers

Phil

Simon · Post by **Simon** » Mon Nov 02, 2009 5:23 pm

Not much luck so far:
put URL returns:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

Anybody have any ideas on this?

Thanks,
Simon

trevordevore · Post by **trevordevore** » Tue Nov 03, 2009 10:20 pm

What happens if you hard code the port number in the URL?

https://myurl.com:2010/some/path/

Simon · Post by **Simon** » Wed Nov 04, 2009 8:41 pm

Hi Trevor,
I tried what you suggested but I get this back from Wireshark:
\\NoSync\\Notes\\Data\\glxapplicationexternals.rev
followed by:
ERROR: STATUS_OBJECT_NAME
Which are the only 2 lines that have anything to do with the application, the original URL never shows up in the log.

Which makes me suspect I've screwed up rev. I'll try again.

Simon

Simon · Post by **Simon** » Fri Nov 06, 2009 10:19 pm

Nope, those Wireshark lines show up anyways.

Still stuck.

Simon

trevordevore · Post by **trevordevore** » Fri Nov 06, 2009 10:21 pm

Are you testing within the Rev IDE or a standalone?

Simon · Post by **Simon** » Fri Nov 06, 2009 10:24 pm

Standalone, having to do these tests remotely.

Simon

trevordevore · Post by **trevordevore** » Fri Nov 06, 2009 10:25 pm

Have you tried your tests with a barebones standalone with no other proxy modifications? Just add a button and try to access the https url?