https://bz.apache.org/bugzilla/show_bug.cgi?id=66592

--- Comment #3 from Mark Thomas <ma...@apache.org> ---
Java's Proxy configuration classes (mainly ProxyType, ProxySelector) don't
support proxies that use TLS between the client and the proxy.

Tomcat's proxy support for WebSocket opted to leverage Java's built-in proxy
configuration classes rather than re-invent the wheel.

A quick survey of the browsers and operating systems I have available didn't
uncover any that allow direct configuration of proxying over TLS via the normal
proxy configuration GUI. Those that do support it do so via a PAC file or
command line arguments. I wonder if Java's lack of support for proxying over
TLS is related.

I couldn't find an enhancement request in the Java bug database for adding
support for proxying over TLS.

What is the use case for using proxying over TLS vs just using a direct TLS
connection?

If we do implement this (and it is still a big if at this stage in my view)
would a custom user property such as "USE_SECURE_PROXY" be sufficient to meet
the requirement? The idea being that you'd configure the http/https proxies as
normal in Java and then, depending on this flag, Tomcat would connect to the
proxy over a clear channel or TLS.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to