Squid proxychains problem

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Squid proxychains problem

Thomas Schmiedl
Hello,

I use xupnpd2 (http://xupnpd.org/xupnpd2_en.html) on my MIPS-based
router to restream some HLS-streams from the internet to my TV. This app
doesn't support https and has no proxy support. The author doesn't want
to provide a newer version of xupnpd2.

I try to restream webcams from Skyline-webcams (e.g.
http://www.skylinewebcams.com/de/webcam/czech-republic/prague/prague/old-town-bridge-tower.html),
which uses https. But it's possible to receive the m3u8-file (the URL
including query-string is in old-town-bridge-tower.html) in http. The
m3u8-file contains https URLs (ts-video-files, which also can downloaded
in http).

My idea is to use a filter proxy to replace the https URLs in the
m3u8-file by http URLs. I use Squid 3.5.12 in Ubuntu 16 with these
eCap-sample-adapter to replace "https" by "http" in the server response:
http://www.e-cap.org/docs/ (victim=https and replacement=http).

A first test with a local http-server worked (URLs were replaced):
curl --proxy 127.0.0.1:3128 http://192.168.178.25:8080/live.m3u8

But with proxychains it doesn't work:
proxychains curl http://192.168.178.25:8080/live.m3u8

I also contacted the author of proxychains. He replied, I should use
sniffing, but I have no sniffing experience.

Maybe someone in this mailing-list could help me?

Best regards,
Thomas
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Squid proxychains problem

Amos Jeffries
Administrator
On 29/03/18 02:34, Thomas Schmiedl wrote:
> Hello,
>
> I use xupnpd2 (http://xupnpd.org/xupnpd2_en.html) on my MIPS-based
> router to restream some HLS-streams from the internet to my TV. This app
> doesn't support https and has no proxy support. The author doesn't want
> to provide a newer version of xupnpd2.
>

Well that sucks. Do you have any alternatives?


> I try to restream webcams from Skyline-webcams (e.g.
> http://www.skylinewebcams.com/de/webcam/czech-republic/prague/prague/old-town-bridge-tower.html),
> which uses https. But it's possible to receive the m3u8-file (the URL
> including query-string is in old-town-bridge-tower.html) in http. The
> m3u8-file contains https URLs (ts-video-files, which also can downloaded
> in http).
>
> My idea is to use a filter proxy to replace the https URLs in the
> m3u8-file by http URLs. I use Squid 3.5.12 in Ubuntu 16 with these
> eCap-sample-adapter to replace "https" by "http" in the server response:
> http://www.e-cap.org/docs/ (victim=https and replacement=http).
>
> A first test with a local http-server worked (URLs were replaced):
> curl --proxy 127.0.0.1:3128 http://192.168.178.25:8080/live.m3u8
>

What I'm not clear on is why you think you need proxychains? a simple
DNAT intercept should do.

The eCAP plugin sounds like it is handling the embedded URL issues that
occur with re-writing for the xupnpd2 response traffic. All you should
need is a way to convert the http:// request URLs from xupnpd2 back into
https:// ones - in theory the eCAP adapter should do both alterations so
they reliably match up, otherwise a URL-rewrite helper can do this later
part.

Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users