Proxy and SSL Decryption

Proxy Settings

All internet traffic is proxied. The environment variables on Linux should be set be default, using /etc/profile.d/lcls2.*). But not all commands/tools use that setting. For example, rpm typically requires you use the --httpproxy --httpport commandline options.

Verify the following settings exist in your environment:

http_proxy=http://jprox.jlab.org:8081

https_proxy=https://jprox.jlab.org:8081

git

Access to github will work with the aforementioned environmental variables set (http_proxy/https_proxy).

SSL Decryption

Almost all SSL traffic is decrypted and reencrypted. This can cause problems, mostly warnings about the certificates not matching.