Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using HTTP Proxy: Retrieved Host is IP Address instead of Domain in HTTPS Tracker URL #7651

Open
bearx3f opened this issue Mar 16, 2024 · 6 comments

Comments

@bearx3f
Copy link

bearx3f commented Mar 16, 2024

Please provide the following information

libtorrent version (or branch): 2.0.10

platform/architecture: qbittorrent-static-nox x86_64

compiler and compiler version: GCC 13.2.0 -- x86_64-linux-musl

I'm using qbittorrent and having http proxy settings

image

And when announce to HTTPS Tracker Libtorrent does not send the Host header in CONNECT requests to HTTPS trackers.

@arvidn
Copy link
Owner

arvidn commented Mar 16, 2024

correct. the CONNECT command optionally includes Proxy-Authorization:, but not the hostname of the destination.

The Host header is sent inside the SSL tunnel, to the destination server.

Is there a problem? Does the proxy need to know the hostname (as opposed to just the IP address) of the destination server?

@bearx3f
Copy link
Author

bearx3f commented Mar 16, 2024

there's a problem to sign the ssl connection in mitm mode proxy without hostname

@arvidn
Copy link
Owner

arvidn commented Mar 16, 2024

I'm intrigued. What's the feature or utility that's enabled by the proxy man-in-the-middling the connection?

You would also have to install their SSL cert for libtorrent to pick up as well. Is that a certification signed for all hostnames?

@bearx3f
Copy link
Author

bearx3f commented Mar 17, 2024

What's the feature or utility that's enabled by the proxy man-in-the-middling the connection?

I'm tracking the download, upload, log event of the torrent, convert tracker response from any encoding to utf-8, and handle this incident #7653

Is that a certification signed for all hostnames?

Yes

and here verbose log from curl it's sent host in CONNECT

image

@arvidn
Copy link
Owner

arvidn commented Jul 23, 2024

@bearx3f could you try this patch out?
#7710

@bearx3f
Copy link
Author

bearx3f commented Jul 24, 2024

Thank you, for your hard work I'll try

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants