how to pass throught "transparent" proxy with basic auth

lab34

Hi,
I'm using openvpn-gui to connect to my personnal openvpn server (on TCP 443 with client certificates), everything is OK, except in a particular place where access is using a transparent proxy with basic auth.

I know that I can configure an http proxy on the gui, with server, port, auth file... but in my case, the proxy is transparent: no ip, no port, just basic auth.
I have to pass my credentials in an header "Authorization : basic blablablabla..."

With a browser, the sequence is:
get http://www.google.fr
-> http 401 (not 407 !)
-> login popup
get http://www.google.fr with credentials
-> http 200

I was thinking about auth-user-pass, would it be a suitable option for that case ?

thanks.

maikcat

n a particular place where access is using a transparent proxy with basic auth.

just curious , if transparent how do you pass user/pass info to it?

michael.

lab34

Hi,
the browser shows a popup just after the http 401

maikcat

does the browser show the proxy ip:port?

Michael.

lab34

No, I did a some fiddler while surfing, there is no proxy ip and no proxy port at all.
It's why a call it "transparent".
The DNS is resolving google with the IP of google, and the http dialog shows the ip of google, not a proxy ip.

The situation is exactly the same as if I were directly connected with the internet, except the basic auth.
First call to google throw a 401, and subsequent calls carry the credentials.

So, I think I need to pass my credentials when I want to reach my server...

lab34

Hi,
I've tried with auth-user-pass with no luck.

Now, what I know:
- the DNS résolution is OK from the client
- The client shows "connection established", but the server log is empty
- after that the conncection is reseted

I think the connection is catched by the proxy.
To be sure, maybe I will try to do some wireshark...

Wed Dec 17 11:13:23 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Wed Dec 17 11:13:23 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Wed Dec 17 11:13:29 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Dec 17 11:13:29 2014 Control Channel Authentication: tls-auth using INLINE static key file
Wed Dec 17 11:13:30 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:443
Wed Dec 17 11:13:30 2014 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:443
Wed Dec 17 11:13:30 2014 TCPv4_CLIENT link local: [undef]
Wed Dec 17 11:13:30 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:443
Wed Dec 17 11:13:30 2014 Connection reset, restarting [-1]
Wed Dec 17 11:13:30 2014 SIGUSR1[soft,connection-reset] received, process restarting