172134 - Proxy: test "HTTPS proxy" (with squid and Netscape PS)

Status: RESOLVED INVALID

(Core :: Networking, defect)

Description

[benc]

Netscape Proxy server has always supported "HTTPS Proxy"
Squid apparently does so as well.

At some point, testing of the pref "network.http.proxy.ssl.connect" should be
tested.

I queried for that string as a comment, and found bug 31174 and bug 40203, which
look like the correct bugs, based on my recollection.

Comment 1

[Doug Turner (:dougt)]

okay.

ben please test "HTTPS proxy" (with squid and Netscape PS)

Comment 2

[Darin Fisher]

iirc, "network.http.proxy.ssl.connect" is a dead pref.  SSL proxy CONNECT is a
supported feature.  the pref to disable it is lame given that you can easily
specify no SSL proxy in the preferences.  we should probably delete the related
lines from all.js.

Comment 3

[benc]

This is an actual form of proxy, and at one point, someone had implemented it. I
also seem to have a conversation about once a year w/ someone who thinks this is
a more feasible design for large, scalable SSL connection management.

Comment 4

[Darin Fisher]

yes, we implement support for SSL proxy (have done so for ages), and i agree
that this is something we should test.  do we really need a bug on file to get
SSL proxy testing?

Comment 5

[benc]

Maybe it got changed in a re-write, but this pref used to be a mode switch.

https: URLs would be requested via HTTP-style proxy-> 
GET https://www.verisign.com

rather than opening an SSL connection tunneled over "SSL TUNNEL" (sometimes
called "Security", "SSL Proxy" or "HTTPS" <thanks to AIM for totally messing
this up). The request sent to the proxy is the now-familiar ->
CONNECT www.verisign.com:443

Comment 6

[Darin Fisher]

hmm... yeah, we only support the CONNECT method for proxying HTTPS.  does NN4
support the "GET https://..." style request?  does IE?  if not, then let's just
close out this bug.  thx!

Comment 7

[benc]

So this pref doesn't do anything anymore?

Comment 8

[Darin Fisher]

benc: yes, that is what i said in comment #2.  can you answer my questions in
comment #6?  are we lacking something that other browsers support?

Comment 9

[benc]

When you said "dead", I didn't know what kind of "dead" you meant.

This would be optional. This had worked in the past with the right pref setting,
but nobody ever said anywhere that the underlying code was removed.

Comment 10

[Darin Fisher]

ok, but does IE or NN4 support this feature?

Comment 11

[benc]

RESOLVED/INVALID:
I don't think neither IE nor Navigator supported this. I think at some point,
the Netscape 4->5 feature list was supposed to work w/ the Netscape Proxy 2&3
feature list, but this never came together.

I had thought this was implemented in Mozilla because someone originally wanted
to offer this as a feature, since both Squid and Netscape Proxy server supported
this mode of proxy.

Bug 205097 is for removal of the pref.