# Proxy authentication patches for open-uri and rubygems

**URL:** <https://www.ruby-forum.com/t/proxy-authentication-patches-for-open-uri-and-rubygems/57867>\
**Category:** Development\
**Created:** [April 15, 2006, 5:57am UTC](https://www.ruby-forum.com/t/proxy-authentication-patches-for-open-uri-and-rubygems/57867 "2006-04-15T05:57:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tadashi\_Kadowaki](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/8e7dd6/32.png) [@Tadashi\_Kadowaki](https://www.ruby-forum.com/u/Tadashi_Kadowaki)\
**Post date:** [April 15, 2006, 5:57am UTC](https://www.ruby-forum.com/t/proxy-authentication-patches-for-open-uri-and-rubygems/57867/1 "2006-04-15T05:57:16Z")

</div>

e$BLgOF$H?=$7$^$9!#e(B

gemse$B$r;H$\*$&$H$7$FITJX$r46$8$?$N$G!"%Q%C%A$r:n$j$^$7$?!#e(B

e$B0l$DL$O!“4D6-JQ?te(Bhttp\_proxye$B$,e(B"[http://user:removed\_email\_address@domain.invalid:8080](http://user:removed_email_address@domain.invalid:8080)"e$B$H$J$C$F$$$ke(B  
e$B\>l9g$K$&$^$/G’\>Z$,$G$-$F$$$J$$7o$KBP$9$k%Q%C%A$G$9!#e(BCVSe$B$K$”$ke(B1.44e$B$KBP$9$k:9J,$G$9!#e(B  
e$B$b$&0l$D$O!"e(Brubygems-0.8.11  
e$B$KBP$9$k%Q%C%A$G$9!#$3$l$G!“G’\>ZIU$Ne(Bproxye$B$+$i$be(B  
rubygemse$B$,;H$($^$9!#$3$A$i$O!“e(BCVSe$B$Ne(Brubygemse$B$O%=!\<%9$r8+$?8B$j!”\<!$N%j%j!\<%9$G$Oe(B  
e$B%Q%C%A$NI,MW$O$J$5$=$&$G$9!#e(B  
gemse$B$K$O!“e(B/usr/lib/ruby/site\_ruby/1.8/rubygems/open-uri.rbe$B$H$$$&%U%!%$%k$,$”$k$N$Ge(B  
e$B$3$l$bCV$-49$($kI,MW$,$”$j$^$9!#e(B

* * *

\*\*\* /usr/lib/ruby/1.8/open-uri.rb.org 2006-02-20 00:17:16.000000000  
+0900  
— /usr/lib/ruby/1.8/open-uri.rb 2006-04-14 19:07:03.000000000 +0900

* * *

## \*\*\* 233,235 \*\*\*\* if proxy ! proxy\_uri, proxy\_user, proxy\_pass = proxy raise “Non-HTTP proxy URI: #{proxy\_uri}” if proxy\_uri.class != URI::HTTP — 233,241 ---- if proxy ! if proxy[0].user && proxy[0].password ! proxy\_uri = proxy[0] ! proxy\_user = proxy[0].user ! proxy\_pass = proxy[0].password ! else ! proxy\_uri, proxy\_user, proxy\_pass = proxy ! end raise “Non-HTTP proxy URI: #{proxy\_uri}” if proxy\_uri.class != URI::HTTP

* * *

\*\*\* /usr/lib/ruby/site\_ruby/1.8/rubygems/remote\_installer.rb  
2006-04-14 17:22:19.000000000 +0900  
— /usr/lib/ruby/site\_ruby/1.8/rubygems/remote\_installer.rb  
2006-04-14 19:14:30.000000000 +0900

* * *

\*\*\* 72,74 \*\*\*\*  
proxy\_uri = URI.parse(@http\_proxy)  
! Net::HTTP::Proxy(proxy\_uri.host, proxy\_uri.port).new(host, port)  
else  
— 72,74 ----  
proxy\_uri = URI.parse(@http\_proxy)  
! Net::HTTP::Proxy(proxy\_uri.host, proxy\_uri.port,  
proxy\_uri.user, proxy\_uri.password).new(host, port)  
else

---

<div class="post-metadata">

**Author:** ![Tadashi\_Kadowaki](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/8e7dd6/32.png) [@Tadashi\_Kadowaki](https://www.ruby-forum.com/u/Tadashi_Kadowaki)\
**Post date:** [April 15, 2006, 7:16am UTC](https://www.ruby-forum.com/t/proxy-authentication-patches-for-open-uri-and-rubygems/57867/2 "2006-04-15T07:16:34Z")

</div>

In article  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid),  
“Tadashi Kadowaki” [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) writes:

> e$B0l$DL$O!“4D6-JQ?te(Bhttp\_proxye$B$,e(B"[http://user:removed\_email\_address@domain.invalid:8080](http://user:removed_email_address@domain.invalid:8080)"e$B$H$J$C$F$$$ke(B  
> e$B\>l9g$K$&$^$/G’\>Z$,$G$-$F$$$J$$7o$KBP$9$k%Q%C%A$G$9!#e(BCVSe$B$K$”$ke(B1.44e$B$KBP$9$k:9J,$G$9!#e(B

e$B4D6-JQ?t$OB\>$N%f!\<%6$+$i;2\>H$G$-$k$?$a%Q%9%o!\<%I$NJ]B8$K$OITe(B  
e$BE,@Z$G$9!#$=$N$?$a!"$3$N%Q%C%A$O\<u$1F~$l$i$l$^$;$s!#e(B

e$B$J$\*!"e(BRFC 3986 e$B$G$Oe(B user:password e$B$re(B userinfo  
e$B$KF~$l$k$N$Oe(B  
deprecated e$B$H$5$l$F$$$^$9!#e(B

Use of the format “user:password” in the userinfo field is  
deprecated. Applications should not render as clear text any data  
after the first colon (“:”) character found within a userinfo  
subcomponent unless the data after the colon is the empty string  
(indicating no password). Applications may choose to ignore or  
reject such data when it is received as part of a reference and  
should reject the storage of such data in unencrypted form. The  
passing of authentication information in clear text has proven to be  
a security risk in almost every case where it has been used.

---

<div class="post-metadata">

**Author:** ![Tadashi\_Kadowaki](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/8e7dd6/32.png) [@Tadashi\_Kadowaki](https://www.ruby-forum.com/u/Tadashi_Kadowaki)\
**Post date:** [April 15, 2006, 8:38am UTC](https://www.ruby-forum.com/t/proxy-authentication-patches-for-open-uri-and-rubygems/57867/3 "2006-04-15T08:38:20Z")

</div>

> > e$B0l$DL$O!“4D6-JQ?te(Bhttp\_proxye$B$,e(B"[http://user:removed\_email\_address@domain.invalid:8080](http://user:removed_email_address@domain.invalid:8080)"e$B$H$J$C$F$$$ke(B  
> > e$B\>l9g$K$&$^$/G’\>Z$,$G$-$F$$$J$$7o$KBP$9$k%Q%C%A$G$9!#e(BCVSe$B$K$”$ke(B1.44e$B$KBP$9$k:9J,$G$9!#e(B
> 
> e$B4D6-JQ?t$OB\>$N%f!\<%6$+$i;2\>H$G$-$k$?$a%Q%9%o!\<%I$NJ]B8$K$OITe(B  
> e$BE,@Z$G$9!#$=$N$?$a!"$3$N%Q%C%A$O\<u$1F~$l$i$l$^$;$s!#e(B

e$B3N$+$K!“4D6-JQ?t$KF~$l$F$\*$/$N$O0BA4$G$O$”$j$^$;$s$M!#e(B  
e$B$b$&\>/$7!":G?7$Ne(Bopen-uri.rbe$B$He(Bremote\_installer.rbe$B$rFI$s$G$\_$^$7$?!#e(B  
gemse$B$G$O!"4D6-JQ?t$Ne(Bhttp\_proxy\_user,e$B!!e(Bhttp\_proxy\_passe$B$r;2\>H$9$k$+e(B  
e$B%Q%9%o!\<%IIU$-$Ne(BURIe$B$,0z?t$H$7$FEO$;$k$3$H$,J,$+$j$^$7$?$N$G!"e(B  
e$B%Q%C%A$OI,MW$J$$$h$&$G$9!#e(B

e$B\<!$N%j%j!\<%94|BT$7$F$$$^$9!#e(B

e$BLgOF!!@5;Ke(B