[W3af-svn-notify] [Task #134649] ssl with proxy - not working ?

[SourceForge.net <no...@so...>]

Task #134649 has been updated. 

Project: w3af
Subproject: TODO v1.00
Summary: ssl with proxy - not working ?
Complete: 0%
Status: Open
Authority  : andresriancho
Assigned to: nobody

Description: dz0@dz0cybsec:~/tools/w3af$ ./w3af.py -s /home/dz0/clientes/cooperativaUniversitaria/script-wml.w3af
w3af>>> url
w3af/url>>> proxy 127.0.0.1 8080
w3af/url>>> back
w3af>>> plugins
w3af/plugins>>> output console,textFile
w3af/plugins>>> output
Enabled output plugins:
textFile
console
w3af/plugins>>> output config textFile
w3af/plugin/textFile>>> set fileName output-wml.txt
w3af/plugin/textFile>>> set verbosity 10
w3af/plugin/textFile>>> back
w3af/plugins>>> output config console
w3af/plugin/console>>> set verbosity 0
w3af/plugin/console>>> back
w3af/plugins>>> discovery all
w3af/plugins>>> discovery
Enabled discovery plugins:
all
w3af/plugins>>> audit all
w3af/plugins>>> grep all
w3af/plugins>>> back
w3af>>> target https://www.itconsultores.com.py/cu_wap/login.wml
w3af>>> start
We failed to reach the server. Reason: "(1, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')"; going to retry.
We failed to reach the server. Reason: "(1, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')"; going to retry.
We failed to reach the server. Reason: "(1, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')"; going to retry.
We failed to reach the server. Reason: "(1, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')"; going to retry.
Too many retries when trying to get: https://www.itconsultores.com.py/cu_wap/login.wml
Too many retries when trying to get: https://www.itconsultores.com.py/cu_wap/login.wml
w3af>>>


Follow-Ups:

-------------------------------------------------------
Date: 2008-02-23 21:44
By: andresriancho

Comment:
http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/456195 is NO GOOD!

It inherits from HTTPHandler, and when I try to build the opener, it fails because I cant have two httphandlers (this one and the keep alive one).

I should implement this in keepalive. Going to do so.


-------------------------------------------------------
Date: 2007-07-14 21:55
By: andresriancho

Comment:
Comment in line 383 of keepalive.py

		# If I change HTTPSConnection to HTTPConnection while using a proxy, the https protocol works on proxies.
		# The only bad thing, is that the connection between w3af and the proxy is clear-text and the connection from the 
		# proxy to the server is https. The correct way is to use CONNECT, and both connections are SSL


-------------------------------------------------------
Date: 2007-07-14 20:00
By: andresriancho

Comment:
Another option:

http://google.com/codesearch?hl=en&q=show:NmRgbblu204:1X4nfP_nbKM:Og78i-jHzng&sa=N&ct=rd&cs_p=http://prdownloads.sourceforge.net/gdisk/gDisk-0.6-sources.zip&cs_f=gDisk-0.6-sources/sources/python/pyOpenSSLProxy/README&start=1

-------------------------------------------------------
Date: 2007-07-14 19:47
By: andresriancho

Comment:
Not supported by urllib2. I should do this:

http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/456195

-------------------------------------------------------
For more info, visit:

http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=134649&group_id=170274&group_project_id=48542