[bug #68250] wget doesn't honor TLS URL in http_proxy

--8323329-846930886-1776413676=:240894
Content-Type: TEXT/plain; CHARSET=utf-8
Content-Transfer-Encoding: QUOTED-PRINTABLE
Content-Disposition: inline

URL:=0A  <https://savannah.gnu.org/bugs/?68250>=0A=0A                 Summa=
ry: wget doesn't honor TLS URL in http_proxy=0A                   Group: GN=
U Wget=0A               Submitter: None=0A               Submitted: Fri 17 =
Apr 2026 08:14:31 AM UTC=0A                Category: Protocol Issue=0A     =
           Severity: 3 - Normal=0A                Priority: 5 - Normal=0A  =
                Status: None=0A                 Privacy: Public=0A         =
    Assigned to: None=0A         Originator Name: aeris=0A        Originato=
r Email: [email protected]=0A             Open/Closed: Open=0A         =
Discussion Lock: Unlocked=0A                 Release: None=0A        Operat=
ing System: GNU/Linux=0A         Reproducibility: Every Time=0A           F=
ixed Release: None=0A         Planned Release: None=0A              Regress=
ion: None=0A           Work Required: None=0A          Patch Included: No=
=0A=0A=0A    _______________________________________________________=0A=0AF=
ollow-up Comments:=0A=0A=0A------------------------------------------------=
-------=0ADate: Fri 17 Apr 2026 08:14:31 AM UTC By: Anonymous=0AHello=0A=0A=
I try to use a squid proxy available on HTTPS only (not plain HTTP)=0ASo I =
define a http_proxy with a https://proxy URL (not http://)=0A=0Awget just i=
gnore the scheme and try to communicate in plain text with the=0Aproxy, wit=
h no TLS session=0A=0A```=0A$ https_proxy=3Dhttps://proxy wget https://imir=
hil.fr/ --debug  =0ADEBUG output created by Wget 1.25.0 on linux-gnu.=0A=0A=
Certificates loaded: 151=0AResolving proxy (proxy)... fd00:10::80=0ACaching=
 proxy =3D> fd00:10::80=0AConnecting to proxy (proxy)|fd00:10::80|:443... c=
onnected.=0ACreated socket 3.=0AReleasing 0x0000559b7af6b420 (new refcount =
1).=0A=0A---request begin---=0ACONNECT imirhil.fr:443 HTTP/1.1=0AUser-Agent=
: Wget/1.25.0=0AHost: imirhil.fr:443=0A=0A---request end---=0AProxy tunneli=
ng failed: ?Unable to establish SSL connection.=0A``` =0A=0A```=0A$ tcpdump=
 -Ani lan ip6 host fd00:10::80 and tcp port 443=0A=0AIP6 fd00:10::3:6.39922=
 > fd00:10::80.443: Flags [P.], length 82=0ACONNECT imirhil.fr:443 HTTP/1.1=
=0AUser-Agent: Wget/1.25.0=0AHost: imirhil.fr:443=0A```=0A=0AcURL hasn't th=
is trouble and initiate a first TLS session to the proxy server=0Abefore tr=
ying to CONNECT on the proxy to the targeted URL=0A=0A```=0A$ https_proxy=
=3Dhttps://proxy curl --verbose https://imirhil.fr/ -I=0A=0A* TLSv1.3 (OUT)=
, TLS handshake, Client hello (1):=0A*  subjectAltName: host "proxy" matche=
d cert's "proxy"=0A*  SSL certificate verify ok.=0A* CONNECT tunnel: HTTP/1=
.1 negotiated=0A* allocate connect buffer=0A* Establish HTTP proxy tunnel t=
o imirhil.fr:443=0A> CONNECT imirhil.fr:443 HTTP/1.1=0A> Host: imirhil.fr:4=
43=0A> User-Agent: curl/8.14.1=0A> Proxy-Connection: Keep-Alive=0A*  subjec=
tAltName: host "imirhil.fr" matched cert's "imirhil.fr"=0A*  SSL certificat=
e verify ok.=0A> HEAD / HTTP/2=0A> Host: imirhil.fr=0A> User-Agent: curl/8.=
14.1=0A> Accept: */*=0A* Request completely sent off=0A< HTTP/2 200 =0AHTTP=
/2 200 =0A```=0A=0A=0A=0A=0A=0A=0A=0A=0A    _______________________________=
________________________=0A=0AReply to this item at:=0A=0A  <https://savann=
ah.gnu.org/bugs/?68250>=0A=0A______________________________________________=
_=0AMessage sent via Savannah=0Ahttps://savannah.gnu.org/=0A
--8323329-846930886-1776413676=:240894
Content-Type: APPLICATION/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQQk97aszIMMAvLLwm6qLAuaBUf3TgUCaeHr7AAKCRCqLAuaBUf3
TjTRAQDklfgFnof+1XHGDC4xvv4x7Y58gaeUGQX/R8CYLjR3FQEAzqrZyIlOXtvC
DKiHxoIsxqdfb127w9tEyvkhmLeglQ8=
=BtVB
-----END PGP SIGNATURE-----

--8323329-846930886-1776413676=:240894--