从卷曲中使用KeepSolid (VPN无限)代理

Question

看来KeepSolid的服务器运行Squid (https://89.45.7.90:3129)，而且Firefox插件可以进行身份验证，这样火狐就可以使用它了。

我想在KeepSolid的服务器上使用curl。VPN无限)

(Analyticshub.link似乎是TLS证书的CN )。

$ curl -v --proxy https://analyticshub.link:3129 --proxy-digest --proxy-user $user:$pass --location https://www.google.com/

*   Trying 89.45.7.90:3129...
* TCP_NODELAY set
* Connected to analyticshub.link (89.45.7.90) port 3129 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Proxy certificate:
*  subject: CN=analyticshub.link
*  start date: Jul  5 08:11:25 2021 GMT
*  expire date: Oct  3 08:11:24 2021 GMT
*  subjectAltName: host "analyticshub.link" matched cert's "analyticshub.link"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* allocate connect buffer!
* Establish HTTP proxy tunnel to www.google.com:443
* Proxy auth using Digest with user 'keepsolid.com@tange.dk'
> CONNECT www.google.com:443 HTTP/1.1
> Host: www.google.com:443
> User-Agent: curl/7.68.0
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 407 Proxy Authentication Required
< Server: squid/3.5.23
< Mime-Version: 1.0
< Date: Sun, 01 Aug 2021 19:02:51 GMT
< Content-Type: text/html;charset=utf-8
< Content-Length: 3557
< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
< Vary: Accept-Language
< Content-Language: en
< Proxy-Authenticate: Basic realm="Web-Proxy"
< X-Cache: MISS from vpnunlimitedapp.com
< X-Cache-Lookup: NONE from vpnunlimitedapp.com:4129
< Connection: close
< 
* Ignore 3557 bytes of response-body
* Received HTTP code 407 from proxy after CONNECT
* CONNECT phase completed!
* Closing connection 0
curl: (56) Received HTTP code 407 from proxy after CONNECT

正如您所看到的，上面的内容不起作用。我该怎么办呢？

Answer 1

这并不是百分之百的回答，但我试着研究Firefox插件是如何工作的。

简单地说，它似乎使用JWT对身份验证服务(auth.simplexsolutionsinc.com)进行了很好的身份验证，使用从多个云存储提供程序获取的用于冗余/绕过阻塞的令牌，然后返回一些使用w/代理的临时凭据。

您应该能够捕获这些短期凭据并像现在一样使用它们，但它们可能不是简单的用户/传递，而且可能类似于代理上的OAuth2承载者或进一步层或JWT。

另外，谢谢你写GNU并行！