diff options
| author | Ingela Anderton Andin <[email protected]> | 2012-09-12 17:36:19 +0200 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2014-02-05 10:32:21 +0100 |
| commit | fd8996767652dc4e162eddea457155a2411157de (patch) | |
| tree | 07fe84ecb1f79257f1807f63a62f99e6765cd1c5 /lib/inets/src/http_client/httpc_internal.hrl | |
| parent | fe5f6f4fa0c5cfc36efb1f7ba7c42d05eb1ce04b (diff) | |
| download | otp-fd8996767652dc4e162eddea457155a2411157de.tar.gz otp-fd8996767652dc4e162eddea457155a2411157de.tar.bz2 otp-fd8996767652dc4e162eddea457155a2411157de.zip | |
inets httpc: TLS via proxy
Introduces new option htts_proxy so that it is possible
to have different proxies for http and https. The new option
defaults to the old proxy option.
Implements HTTP-1.1 extension method CONNECT to establish SSL/TLS tunnel
We choose not to implement "TLS upgrade" as defined by RFC 2817 as
this method of upgrade is vulnerable to man in the middle attacks,
can be easily broken by proxies and does not seem to be widely adopted.
Diffstat (limited to 'lib/inets/src/http_client/httpc_internal.hrl')
| -rw-r--r-- | lib/inets/src/http_client/httpc_internal.hrl | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/inets/src/http_client/httpc_internal.hrl b/lib/inets/src/http_client/httpc_internal.hrl index 8af752546c..30e2742e9d 100644 --- a/lib/inets/src/http_client/httpc_internal.hrl +++ b/lib/inets/src/http_client/httpc_internal.hrl @@ -37,6 +37,7 @@ -define(HTTP_MAX_REDIRECTS, 4). -define(HTTP_KEEP_ALIVE_TIMEOUT, 120000). -define(HTTP_KEEP_ALIVE_LENGTH, 5). +-define(TLS_UPGRADE_TOKEN, "TLS/1.0"). %%% HTTP Client per request settings -record(http_options, @@ -72,6 +73,7 @@ -record(options, { proxy = {undefined, []}, % {{ProxyHost, ProxyPort}, [NoProxy]}, + https_proxy = {undefined, []}, % {{ProxyHost, ProxyPort}, [NoProxy]} %% 0 means persistent connections are used without pipelining pipeline_timeout = ?HTTP_PIPELINE_TIMEOUT, max_pipeline_length = ?HTTP_PIPELINE_LENGTH, |