search

vert-x3 / vertx-web

HTTP web applications for Vert.x
Apache License 2.0
1.1k stars 526 forks source link

Investigate if Vertx WebClient can support HTTP proxy server proxying HTTPS requests #2468

Open sberyozkin opened 10 months ago

sberyozkin commented 10 months ago

Original question: https://stackoverflow.com/questions/76962454/quarkus-vert-x-attempting-to-connect-to-proxy-over-ssl.

Keycloak address is HTTPS based. Squid proxy is HTTP based but HTTPS is attempted between Quarkus and Squid.

I'm marking it as an enhancement as I'm not sure if it is a bug or if the whole concept of HTTP proxy proxying HTTPS requests is very sound from the security point of view.

Additional info: https://serverfault.com/questions/1113988/how-does-a-http-proxy-server-proxy-https-requests (the comment to that unanswered question points to another useful doc)

CC @cescoffier @vietj @tsegismont

vietj commented 10 months ago

the Vert.x HTTP client can connect to a remote HTTPS server through a proxy reached with HTTP using an HTTP tunnel, is that what you mean ? https://en.wikipedia.org/wiki/HTTP_tunnel / https://vertx.io/docs/vertx-core/java/#_using_a_proxy_for_httphttps_connections

is that what you meant ?