如何响应 http CONNECT 请求?



我想在 kotlin 中创建一个带有套接字的代理。我创建了一个将客户端(google.com(连接到套接字的套接字服务器。来自 Google 的 http 请求是:

CONNECT www.google.com:443 HTTP/1.1
Host: www.google.com:443
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36

所以我发送到套接字:

HTTP/1.1 200 Connection Established
Connection: close

然后谷歌发送:

; 7����r���9 ����l&�����cO��9���� �.rW�Vs9�T���}�$_aX�ys��&�X "���+�/�,�0̨̩�� � � / 5 
���        www.google.com   �   

zz       #     hhttp/1.1       
3 + )zz     
(��>�%܇�    �fT5
��5��ue�u��` -  + 
**   ZZ   ) � � +c���>L����#9�����'���Ʌͩ�5��h�Bn��O�G)��    ����f�^���S�d|bC�7VT5�:���^�QSRך`MM�g#�[�|�T�9h@�K:7?��t��49   �;`�ʛ�"��ٹ��9����H�f�@��=�����2���(��T)B�`�#�nhS���!뷊��E�ao����/z)e��}���,>�����G��B�� ! ��OF�p�-�>q

我使用新的 ssl 套接字将这些字节发送到域google.com和端口443,但这不起作用。响应是:

HTTP/1.0 400 Bad Request
Content-Length: 54
Content-Type: text/html; charset=UTF-8
Date: Sat, 31 Aug 2019 14:16:46 GMT
<html><title>Error 400 (Bad Request)!!1</title></html>

我的代码:

fun createServerSocket() {
println("Starting Server")
val server_socket = ServerSocket(555)
Thread{
val connection_socket = server_socket.accept()
//connection_socket.soTimeout = 2000
_handleConnectionSocket(connection_socket)
}.start()
}
private fun _handleConnectionSocket(client_socket: Socket) {
Thread{
val client_inputStream = client_socket.getInputStream()
val client_outputStream = client_socket.getOutputStream()
val client_bufferedWriter = BufferedWriter(OutputStreamWriter(client_outputStream))
val ssf = SSLSocketFactory.getDefault() as SSLSocketFactory
val server_socket = ssf.createSocket("google.com", 443)
val server_inputStream = server_socket.getInputStream()
val server_outputStream = server_socket.getOutputStream()
var should_save = false
Thread{
try {
val buffer = ByteArray(4096)
do {
val read = client_inputStream.read(buffer)
if (should_save) {
if (read > 0) {
server_outputStream.write(buffer, 0, read)
if (client_inputStream.available() < 1)
server_outputStream.flush()
}
}
} while (read >= 0)
} catch (e: java.net.SocketTimeoutException) {}
}.start()
Thread.sleep(1000)
should_save = true
val client_success_response =
"""
HTTP/1.1 200 Connection Established
Connection: close

""".trimIndent()
client_bufferedWriter.appendln(client_success_response)
client_bufferedWriter.flush()
Thread.sleep(800)
try {
val buffer = ByteArray(4096)
do {
val read = server_inputStream.read(buffer)
if (read > 0) {
client_outputStream.write(buffer, 0, read)
if (server_inputStream.available() < 1)
client_outputStream.flush()
}
} while (read >= 0)
} catch (e: java.net.SocketTimeoutException) {}
println("Fertig")
}.start()
}

我做错了什么?

根据代码,您似乎知道 CONNECT 是如何错误的。它应按如下方式工作:

  1. 客户端(浏览器(向代理发送 CONNECT 请求,其中包括它想要连接的主机名和端口。
  2. 代理创建与请求的服务器的 TCP(而不是 SSL(连接。
  3. 如果成功建立此连接,代理将HTTP/1.1 200 Connection Established...响应发送到浏览器。
  4. 从那时起,代理将简单地在客户端和服务器之间双向转发所有数据。

最新更新