Openconnect proxy Keep-Alive

Alexander Rumyantsev alexander at rumyantsev.com
Mon Sep 8 04:43:32 PDT 2014


Hello!

I ran into situation, when my proxy sends "Connection: close" while trying to authenticate in spite of openconnect’s "Connection: keep-alive" request.
Openconnect first receives HTTP 407 Authentication Required for parsing available auth methods, then tries to send request with Proxy-Authorization header within closing connection and we get "Error fetching HTTPS response".

Openconnect have either to send "Proxy-Authorization" immediately, or to handle "Connection: close"

I’ve prepared small patch, which forces availability of chosen auth methods and forces authentication without detection phase.
It works for me for Basic and NTLM methods as well.

It’s a bit dirty, but usable.

WBR,
Alexander Rumyantsev

-------------- next part --------------
A non-text attachment was scrubbed...
Name: openconnect-6.00-proxy-auth-force.patch
Type: application/octet-stream
Size: 3686 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20140908/f391a186/attachment.obj>


More information about the openconnect-devel mailing list