vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-30 21:26:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Support HTTPS managed proxy CA trust (#79171)

Browse Source 
* fix: support HTTPS managed proxy CA trust

* fix: strip IP SNI for HTTPS proxy dispatchers

* fix: harden managed proxy undici dispatchers

* docs: refresh proxy baselines

* fix: drop stale whatsapp undici dependency

* fix: satisfy proxy dispatcher lint and tests

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
This commit is contained in:
Jesse Merhi
2026-05-17 15:23:30 +10:00
committed by GitHub
parent 421b9e2819
commit 7c2425a518
53 changed files with 2003 additions and 148 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/cli/proxy-cli.runtime.ts
View File

@@ -195,9 +195,14 @@ function formatProxyValidationNextSteps(result: ProxyValidationResult): string[]
"Enable proxy.enabled with proxy.proxyUrl or OPENCLAW_PROXY_URL, or pass --proxy-url for an explicit one-off validation.",
];
}
if (result.config.errors.some((error) => error.includes("proxy CA file could not be read"))) {
return [
"Confirm proxy.tls.caFile or --proxy-ca-file points to a readable PEM CA file for the HTTPS proxy endpoint.",
];
}
if (result.config.errors.length > 0) {
return [
"Fix proxy.proxyUrl, OPENCLAW_PROXY_URL, or --proxy-url so it uses a reachable http:// proxy.",
"Fix proxy.proxyUrl, OPENCLAW_PROXY_URL, or --proxy-url so it uses a reachable http:// or https:// proxy.",
];
}
if (result.checks.some((check) => !check.ok && check.kind === "allowed")) {
@@ -254,6 +259,7 @@ function formatProxyValidationText(result: ProxyValidationResult): string {
export async function runProxyValidateCommand(opts: {
json?: boolean;
proxyUrl?: string;
proxyCaFile?: string;
allowedUrls?: string[];
deniedUrls?: string[];
apnsReachability?: boolean;
@@ -265,6 +271,7 @@ export async function runProxyValidateCommand(opts: {
config: config?.proxy,
env: process.env,
proxyUrlOverride: opts.proxyUrl,
proxyCaFileOverride: opts.proxyCaFile,
allowedUrls: opts.allowedUrls,
deniedUrls: opts.deniedUrls,
apnsReachability: opts.apnsReachability,