• State TI Thinks Resolved
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 869 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC3200: Proxy and https

Cedric Gerber
Expert 2310 points

Part Number: CC3200

Hi,

I have a working product where I sometime use the proxy and http to debug it.

Now I have a customer who wants to use their proxy to connect to our server over https. 

Is this supported with the Http client?

I have been able to connect to the server with HTTP using either the customer proxy or Fiddler on my computer.  When I configure the https connection (which works OK without proxy), I get the error -462 (connection timed out due to handshake time)

Wireshark shows that it's the CC3220 which stops the connection and resets it after 30sec. See screenshot.

  • 0
    TI__Genius 15590 points
    Cedric,

    Yes this is supported. I would double check your proxy settings, and ensure you are allowing HTTPS data to pass on the given port. HTTP and HTTPS are typically on different ports, and your Proxy could be blocking the connection.

    This sounds like a configuration problem on the proxy end, since the HTTPS without the proxy works correctly.

    Regards,
    Alexis
  • 0 in reply to Alexis Crandall20
    Expert 2310 points
    Hi Alexis,

    Thanks for your feedback!

    I forgot to mention that I tested the proxy with a simple python webclient (to avoid all the magic done by IE or chrome) with both HTTP and HTTPS, both worked fine. The same port is used for both protocols.

    When checking the code of httpcli.c, I do not find any place where the HTTP CONNECT to the proxy is triggered. There is the function httpProxyTunnel which does what I would expect, but it's only included for non simplelink platform. Am I missing something?

    Best regards,
    Cédric
  • 0 in reply to Cedric Gerber
    Expert 2310 points

    Small update: I have looked at the cc3220 implementation, this one implements (and use) the httpProxyTunnel which I do not see for the CC3200. 

  • 0 in reply to Cedric Gerber
    Expert 2310 points
    I have made more trials with the CC3200 and CC3220. I think it is not implemented in the CC3200, the method httpProxyTunnel is not used and with wireshark we can not see any HTTP CONNECT.

    Can you confirm if that is the case? And if it is possible to add it by modifying httpcli?
  • 0 in reply to Cedric Gerber
    TI__Genius 15590 points

    hi Cedric,

    I believe you are correct. the CC3220 has the capability built into the libraries, and the CC3200 does not. However, it should be possible to implement as you suggested by modifying httpcli.

    Thanks,

    Alexis

  • 0 in reply to Alexis Crandall20
    Expert 2310 points
    Hi Alexis,

    I finally had some time to give it a try, however I don't see how I can do it.

    What I want to do is:
    Open and connect the socket, send a HTTP CONNECT SERVER_NAME:PORT to the proxy and then start the secure communication.

    However in the cc3200, the socket connection and the start of secure communication seem to be done in the black box "sl_Connect". I do not see how I can modify httpcli.c and/or socket.c to insert the http tunneling.
    Am I missing something? Or would a change of the network processor be needed?

    Thanks,
    Cédric