https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162016-12-07T13:14:11ZpfSense bugtrackerpfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=298122016-12-07T13:14:11ZJim Pingle
<ul><li><strong>Category</strong> changed from <i>Upgrade</i> to <i>Operating System</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>50</i></li></ul><p>I pushed some changes to populate the HTTP_PROXY_AUTH variable and it works for HTTP, but HTTPS does not work using the same mechanism. This happens even with fetch and not just pkg, so it may be a limitation of libfetch and beyond our control at the moment.</p>
<p>I also tried with the user/pass in the HTTP_PROXY variable in multiple styles ("user:pass@x.x.x.x:3128", "http://user:pass@x.x.x.x:3128/"), none of which worked with fetch or pkg.</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=298152016-12-08T02:30:28ZKill Bill
<ul></ul><p><a class="user active" href="https://redmine.pfsense.org/users/10">Jim Pingle</a>: Perhaps this is relevant to HTTPS not working?</p>
<p><a class="external" href="https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483">https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483</a></p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=298192016-12-08T07:08:50ZJim Pingle
<ul></ul><p>It's possible but doesn't sound quite the same. Here's a capture of the initial exchange I grabbed yesterday where the client is trying to setup the connection and fails -- it never sends the subsequent attempt with credentials as it does with HTTP:</p>
<p>Client:</p>
<pre>
CONNECT www.example.com:443 HTTP/1.1
Host: www.example.com:443
</pre>
<p>Server:</p>
<pre>
HTTP/1.1 407 Proxy Authentication Required
Server: squid
Mime-Version: 1.0
Date: Wed, 07 Dec 2016 18:30:33 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 3380
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: Basic realm="Please enter your credentials to access the proxy"
X-Cache: MISS from localhost
X-Cache-Lookup: NONE from localhost:3128
Connection: keep-alive
</pre>
<p>There is only one line in the actual HTTP 407 error, so that last update on the ticket doesn't quite match but it might be worth trying that patch on a FreeBSD box to see if it helps.</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=304372017-01-07T12:27:49ZJim Thompsonjim@netgate.com
<ul><li><strong>Assignee</strong> set to <i>Jim Pingle</i></li></ul> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=304482017-01-07T18:09:10ZJim Pingle
<ul><li><strong>Assignee</strong> changed from <i>Jim Pingle</i> to <i>Renato Botelho</i></li></ul><p>Looks like the patch on the FreeBSD bug entry was committed. We should be able to pull it in from there.</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=304832017-01-09T05:49:40ZRenato Botelhorenato@netgate.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li><li><strong>Assignee</strong> changed from <i>Renato Botelho</i> to <i>Jim Pingle</i></li></ul><p>Done. Last commit was cherry-picked</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=304872017-01-09T09:54:11ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul><p>Works on the latest snap including the patch.</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=362352018-04-04T13:33:59ZJulio Acosta
<ul></ul><p>Hello Jim Pingle , I am new using pfsense 2.4.2, I have the same problem of User authentication and password in my proxy, I have read this forum, but I need help to apply and install this <a class="external" href="https://bugs.freebsd.org/bugzilla/show_bug.cgi">https://bugs.freebsd.org/bugzilla/show_bug.cgi</a> ? id = 194483 in the pfsense from the console??, thanks for your help.</p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=365372018-05-15T05:04:26ZY Nmrpsycho@mail.ru
<ul></ul><p>i have same problem.</p>
<p>on System/Advanced/Miscellaneous i've added proxy info with username and password, and pfsense can't search, update or install packages.</p>
<p>on cli: <br /><pre>
[2.4.3-RELEASE][root@pfSense.local]/root: pkg search mc
pkg: Repository pfSense-core load error: access repo file(/root/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
pkg: https://pkg.pfsense.org/pfSense_v2_4_3_amd64-core/meta.txz: Proxy Authentication Required
pkg: https://pkg.pfsense.org/pfSense_v2_4_3_amd64-core/packagesite.txz: Proxy Authentication Required
pkg: Repository pfSense load error: access repo file(/root/var/db/pkg/repo-pfSense.sqlite) failed: No such file or directory
pkg: https://pkg.pfsense.org/pfSense_v2_4_3_amd64-pfSense_v2_4_3/meta.txz: Proxy Authentication Required
pkg: https://pkg.pfsense.org/pfSense_v2_4_3_amd64-pfSense_v2_4_3/packagesite.txz: Proxy Authentication Required
</pre></p> pfSense - Bug #6949: username/password not used by proxy supporthttps://redmine.pfsense.org/issues/6949?journal_id=365382018-05-15T05:05:30ZY Nmrpsycho@mail.ru
<ul></ul><pre>
[2.4.3-RELEASE][root@pfSense.local]/root: env | grep PROX
HTTP_PROXY=185.34.52.z:3128
HTTP_PROXY_AUTH=basic:*:user:pass
</pre>