HTTPS

[kee nethery]

I’m trying to imagine how you would set up an HTTPS connection to a server through a proxy. The whole point of an HTTPS connection is to prevent a man-in-the-middle attack and a proxy is a prime example of a man-in-the-middle attack.

http://stackoverflow.com/questions/516323/https-connections-over-proxy-servers

Kee Nethery


On Nov 6, 2013, at 1:51 AM, Nakia Brewer <Nakia.Brewer at westrac.com.au> wrote:

> Thinking I might try this library out and see if it simplifies things for cURL
> 
> http://marksmith.on-rev.com/revstuff/files/libRevCurl.zip
> 
> 
> Sent from my iPhone
> 
> On 6 Nov 2013, at 4:36 pm, "J. Landman Gay" <jacque at hyperactivesw.com<mailto:jacque at hyperactivesw.com>> wrote:
> 
> Unfortunately GLX doesn't support HTTPS through a proxy, though it does support most types of proxies when you send regular HTTP requests.
> 
> 
> On 11/5/13 10:56 PM, Nakia Brewer wrote:
> Okay, does anyone happen to know if the custom libURL in GLX Application Framework gets over this issue?
> I am happy to convert it to GLX If need be :)
> 
> -----Original Message-----
> From: use-livecode [mailto:use-livecode-bounces at lists.runrev.com] On Behalf Of J. Landman Gay
> Sent: Wednesday, 06 November 2013 15:50
> To: How to use LiveCode
> Subject: Re: HTTPS
> 
> Yes, all internet connectivity goes through libURL. You do have use
> shell if you want to bypass it.
> 
> 
> On 11/5/13 9:45 PM, Nakia Brewer wrote:
> Is it fair for me to assume that because I am using a raw expression and not referring libURL that I am not using the libURL Library?
> Or is libURL used for all internet requests?
> 
> My call for example;
> set the httpHeaders to "Proxy-Authorization: Basic" && base64Encode(tUsername & colon & tPassword) &cr&"Content-Type:application/xml"&cr&"Accept:application/xml"
> get URL ("https://" & userName & ":" & URLEncode(userPass) &"@"&theSubDomain&".harvestapp.com/daily<http://harvestapp.com/daily>")
> 
> -----Original Message-----
> From: use-livecode [mailto:use-livecode-bounces at lists.runrev.com] On Behalf Of J. Landman Gay
> Sent: Wednesday, 06 November 2013 13:51
> To: How to use LiveCode
> Subject: Re: HTTPS
> 
> On 11/5/13 8:21 PM, Nakia Brewer wrote:
> Hi,
> 
> I have asked about this issue on the Forum some time ago but never got back to testing it further.
> I have a desktop application that needs to communicate to a REST API over HTTPS and I am having issues with what I think is a certificate problem when I try and use the application on my work network.
> NOTE - This issues doesn't occur at my home network.
> 
> So, to explain the issue.
> When I do a HTTPS Request (Via GET) I get returned a Error 10061 on socket
> -          IT can NOT see my request at the Proxy
> 
> Now if I do a simple HTTP Request (Via GET) it works correctly
> -          IT can confirm they are seeing  my request at the Proxy.
> 
> I have tried setting the libUrlSetSSlVerification false but to no avail.
> I don't know much about SSL or anything but is it fair for me to assume that the work network is denying my connection because it is HTTPS without a certificate?
> If that is the case I have found how to point to certificates but have no idea where/how to generate a certificate that would be valid so the connection works?
> 
> I hope this makes some sense and I look forward to any idea's you all may have!
> 
> As I understand it, libURL (the internet library) doesn't support HTTPS
> via proxies. I am facing a similar issue right now.
> 
> 
> 
> 
> 
> --
> Jacqueline Landman Gay         |     jacque at hyperactivesw.com<mailto:jacque at hyperactivesw.com>
> HyperActive Software           |     http://www.hyperactivesw.com
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com<mailto:use-livecode at lists.runrev.com>
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
> 
> 
> COPYRIGHT / DISCLAIMER: This message and/or including attached files may contain confidential proprietary or privileged information. If you are not the intended recipient, you are strictly prohibited from using, reproducing, disclosing or distributing the information contained in this email without authorisation from WesTrac. If you have received this message in error please contact WesTrac on +61 8 9377 9444. We do not accept liability in connection with computer virus, data corruption, delay, interruption, unauthorised access or unauthorised amendment. We reserve the right to monitor all e-mail communications.
> 
> 
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode