Proxy Config Help

wildweaselmi

New Member
Feb 22, 2018
1
0
1
53
Hello ProxMox Community.

Just installed and purchased a community subscription to proxmox. I'm behind a proxy and having difficulty getting through the proxy to download templates, Check subscription, etc..

Now I did successfully add credentials to
/etc/apt/apt.conf
Code:
Acquire::http::Proxy "hxxp://domain\user:password@ipaddress:port”;
Acquire::https::Proxy "hxxp://domain\user:password@ipaddress:port";
Acquire::ftp::Proxy "hxxp://domain\user:password@ipaddress:port";
apt-get update works just fine

Did the same thing for wget
/etc/wgetrc
Code:
https_proxy = hxxp://domain\user:password@ipaddress:port/
http_proxy = hxxp://domain\user:password@ipaddress:port/
ftp_proxy = hxxp://domain\user:password@ipaddress:port/
UNCOMMENT use_proxy = on
wget works

What doesn't work is anything in the GUI of proxmox that requires internet access

Setup I went to
Data Center - Options - HTTP_proxy
and i've tried several different ways of entering the same information as I added to the apt.conf and wgetrc file above without any luck.
I've tested the proxy settings in a few different ways
1. Clicked on server under Data Center - Subscription - Check (Fails)
2. Click on local node, templates - download (Fails)
3. From CLI I run pveam update

Troubleshooting I have reviewed /var/log/pveam.log
Code:
2018-02-22 11:10:11 start download hxxps://releases.turnkeylinux.org/pve/aplinfo.dat.asc
2018-02-22 11:10:11 download failed: 500 SSL upgrade failed: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2018-02-22 11:10:11 update failed - no signature file '/var/lib/pve-manager/apl-info/pveam-releases.turnkeylinux.org.tmp.19549.asc'

Any ideas?
 
i guess your proxy does ssl interception and changes the ssl certificate? if yes, you have to include your ca cert into the trusted cert store
see 'man update-ca-certificates'