From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 2B0081FF15C for <inbox@lore.proxmox.com>; Wed, 26 Mar 2025 11:52:24 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 56143349EF; Wed, 26 Mar 2025 11:52:19 +0100 (CET) From: Friedrich Weber <f.weber@proxmox.com> To: pve-devel@lists.proxmox.com Date: Wed, 26 Mar 2025 11:51:08 +0100 Message-Id: <20250326105108.34911-3-f.weber@proxmox.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250326105108.34911-1-f.weber@proxmox.com> References: <20250326105108.34911-1-f.weber@proxmox.com> MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.010 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pve-devel] [PATCH manager 2/2] fix #3716: api: nodes: query metadata: use proxy option for https X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> When downloading an ISO, VZ template, or OVA file via the web UI, the web UI uses the query-url-metadata endpoint to query file size, file name and MIME type via an HTTP HEAD request. In a setup where this request has to go over a proxy (configured via the http_proxy datacenter option), querying the metadata only works for http:// URLs, not https:// URLs. The reason is that the query-url-metadata handler uses LWP and does not register the proxy for the https scheme. Fix this by registering the proxy also for the https scheme. This will break setups that rely on http_proxy not being respected for https:// URLs. For example, setups that have a proxy for external connections, but download e.g. ISO files (only) via https from an internal repository that the proxy doesn't serve. Signed-off-by: Friedrich Weber <f.weber@proxmox.com> --- PVE/API2/Nodes.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PVE/API2/Nodes.pm b/PVE/API2/Nodes.pm index 9cdf19db..c142607e 100644 --- a/PVE/API2/Nodes.pm +++ b/PVE/API2/Nodes.pm @@ -1760,7 +1760,7 @@ __PACKAGE__->register_method({ my $dccfg = PVE::Cluster::cfs_read_file('datacenter.cfg'); if ($dccfg->{http_proxy}) { - $ua->proxy('http', $dccfg->{http_proxy}); + $ua->proxy(['http', 'https'], $dccfg->{http_proxy}); } my $verify = $param->{'verify-certificates'} // 1; -- 2.39.5 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel