tunnelling ssh over https proxy
- To: firstname.lastname@example.org
- Subject: tunnelling ssh over https proxy
- From: thomas lakofski <email@example.com>
- Date: Fri, 2 Apr 1999 17:24:11 +0000 (UTC)
- Message-id: <Pine.LNX.3.96.990402171414.10195A-100000@oi>
before i try and do all the legwork on this one, i just wanted to check
that no-one had a prerolled solution to this one:
i'm trying to let myself connect to my linux box from work through our
Apache proxy's https tunneling. i've set up a port redirector that points
port 443 on the box to 22, so the acl on the proxy will think that it's
going to a ssl site.
ssh accepts a config file option ProxyCommand which it runs, and reads
from and writes to via STDIN/OUT as if it were the remote socket -- this
lets you do the CONNECT command.
unfortunately, the obvious 'echo -e "CONNECT 88.NET:443 HTTP/1.0\n\n" | nc
proxyserver 8080' doesn't work because the first line that comes back is
the CONNECT string from the proxy, after which I see the SSH server
announce itself. the ssh client doesn't like seeing anything but the sshd
at the other end. so, I just need to soak up the string from the proxy
and everything would be fine and dandy.
i guess i would want perl for it probably -- i guess an ideal mini-server
-listen on a local port
-connect to the proxy
-send the connect string
-ignore the first line that comes back
-connect the socket to STDIN/OUT and loop in a stupid fashion until a
hopefully someone has done this already. if not, i might even become a
maintainer and package it when it works.
please forgive my abrupt ending hre - but my conection is
xtrememleyyhiclmelyey BAD hiccuppy etc must sign off -
EF D8 33 68 B3 E3 E9 D2 C1 3E 51 22 8A AA 7B 98 umbra (!)