HTTPS in PAC file

proxy pac
3went2 picture 3went2 · Feb 29, 2012 · Viewed 11.3k times · Source

I am writing a .pac file for use with iOS5 without jailbreak, but I feel trouble in matching the url starting with "https" (eg: https://test.com).

Here is my script:

function FindProxyForURL(url, host) {
  if (shExpMatch(url, "https://*")) return "PROXY 123.123.123.123";
  return 'DIRECT';
}

And if I matched "https://test.com", how can I return "https://123.123.123.123" to the URL?

Answer

tripleee picture tripleee · Feb 29, 2012

This should not have been accepted. Please vote to delete if you can.

Original answer:

You cannot proxy the HTTPS protocol without breaking end-to-end security, which is its single distinguishing feature. The reason your matches "don't work" is that your PAC file is ignored for HTTPS.

Routing the traffic between the browser and an on-device proxy over HTTPS is also quite pointless, regardless of whether it is technically possible. I imagine it has been made impossible for security reasons (so that users cannot be fooled to think traffic is secure when it isn't) but I have not investigated.

Related questions

Using npm behind corporate proxy .pac

I need to download several packages through npm but our corporate proxy configuration is a .pac file (i'm on windows) I have already tried npm config set proxy http://mydomain\username:[email protected]:8181/proxy.pac npm config set https-proxy http://mydomain\…

Read More
Linux: how to set up proxy using pac script

I am using Red Hat Enterprise Linux Server release 6.2, and I have only terminal access (no GUI). My company has a proxy auto-config script (PAC), and that is the only way to get internet connection. I had no problem with …

Read More
How to find proxy server and password from .pac file

I am using dynatrace ajax edition and it requires an proxy server and password to connect to dynatrace server. The problem is I ONLY have the .pac file URL that we use at work. Is it possible to know which …

Read More