ncr / rack-proxy

A request/response rewriting HTTP proxy. A Rack app.
MIT License
269 stars 94 forks source link

Add ssl_version override to Rack::Proxy #54

Closed bmarchant closed 8 years ago

bmarchant commented 8 years ago

Allow Rack::Proxy users to specify the exact version of SSL/TLS to use in the proxy. Some web servers are configured to only accept certain versions which may cause SSL errors.

Two new tests were added to test/rack_proxy_test.rb that force Rack::Proxy to use :TLSv1 instead of :TLSv1_2 which is the default on my test machine. Older versions of Ruby default to :SSLv3 which can cause failures on servers that only allow for TLSv1+.

Attachment is a Wireshark dump showing the mix of both TLS v1 and v1.2 used in the tests. wireshark