# I need connect Proxy Server with certification

**URL:** <https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648>\
**Category:** Installing and Using OpenWrt\
**Created:** [February 4, 2021, 7:11am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648 "2021-02-04T07:11:55Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![acua87](https://forum.openwrt.org/letter_avatar/acua87/32/5_5575768a8748004e209b776fc1b2916d.png) [@acua87](https://forum.openwrt.org/u/acua87)\
**Post date:** [February 4, 2021, 7:11am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/1 "2021-02-04T07:11:55Z")

</div>

To anyone for me,

I need your help.  
I failed opkg update on Raspberry Pi 4.

root@OpenWrt:~# opkg update  
Downloading [https://downloads.openwrt.org/snapshots/targets/bcm27xx/bcm2711/packages/Packages.gz](https://downloads.openwrt.org/snapshots/targets/bcm27xx/bcm2711/packages/Packages.gz)  
Failed to send request: Operation not permitted  
\*\*\* Failed to download the package list from [https://downloads.openwrt.org/snapshots/targets/bcm27xx/bcm2711/packages/Packages.gz](https://downloads.openwrt.org/snapshots/targets/bcm27xx/bcm2711/packages/Packages.gz)  
..  
..  
..

I suspect proxy makes to fail update.  
My company has internal network and Proxy server for security.  
So I got below the proxy guideline for connecting external internet network.  
But, It is not for our OS, openwrt.

[For Ubuntu, Debian, Mint]  
http\_proxy=http://MyCompanyProxyIPaddr:8080  
https\_proxy="[http://MyCompanyProxyIPaddr:8080](http://MyCompanyProxyIPaddr:8080)"  
no\_proxy="127.0.0.1, localhost"

[For CentOS, Fedora, Redhat]  
export http\_proxy="[http://MyCompanyProxyIPaddr:8080](http://MyCompanyProxyIPaddr:8080)"  
export https\_proxy="[http://MyCompanyProxyIPaddr:8080](http://MyCompanyProxyIPaddr:8080)"  
export no\_proxy="127.0.0.1, localhost"

[Register Certificate]  
sudo mkdir /usr/share/ca-certificates/MyCompany  
sudo cp MyCompanyCerti.crt /usr/share/ca-certificates/MyCompany/  
sudo dpkg-reconfigure ca-certificates  
sudo update-ca-certificates  
Same process to /etc/ssl/cert

So, How can I solve this issue?  
Do you have any other commands to replace sudo, dpkg-reconfigure, update-ca-certificates and so on?

Thank you.

---

<div class="post-metadata">

**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\
**Post date:** [February 4, 2021, 7:41am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/2 "2021-02-04T07:41:45Z")

</div>

check out the opkg proxy settings

> **[Opkg Package Manager](https://openwrt.org/docs/guide-user/additional-software/opkg#proxy_support)**
>
> Opkg Package Manager Like most Linux distributions (or mobile device operating systems like say Android or iOS), the functionality of the system can be upgraded rather significantly by downloading and installing pre-made packages from package...

---

<div class="post-metadata">

**Author:** ![acua87](https://forum.openwrt.org/letter_avatar/acua87/32/5_5575768a8748004e209b776fc1b2916d.png) [@acua87](https://forum.openwrt.org/u/acua87)\
**Post date:** [February 4, 2021, 7:53am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/3 "2021-02-04T07:53:51Z")

</div>

Thank you to reply for me.

I refer "Proxy Support" on this page for setting proxy.  
but, I can't find to register certificates.

I found same result by only setting "Proxy Support".  
" Failed to send request: Operation not permitted "

Just I think.. must have to register certificates.  
Do you have any other openwrt commands to replace sudo, dpkg-reconfigure, update-ca-certificates?

---

<div class="post-metadata">

**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\
**Post date:** [February 4, 2021, 8:19am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/4 "2021-02-04T08:19:34Z")

</div>

w/o having access to any openWRT device at the moment, you should be able to check where owrt stores the certificates, and add yours.

---

<div class="post-metadata">

**Author:** ![acua87](https://forum.openwrt.org/letter_avatar/acua87/32/5_5575768a8748004e209b776fc1b2916d.png) [@acua87](https://forum.openwrt.org/u/acua87)\
**Post date:** [February 5, 2021, 8:26am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/5 "2021-02-05T08:26:27Z")

</div>

I found below things for openwrt on Raspberry Pi 4.

**OpenWrt does not support "https\_proxy".**

I set Proxy option in /etc/opkg.conf and then enter opkg update.  
(refer to [https://openwrt.org/docs/guide-user/additional-software/opkg#proxy\_support](https://openwrt.org/docs/guide-user/additional-software/opkg#proxy_support))

But, failed.  
So, I change package download link address in my openwrt.  
Changing from "https://" to "http://" in "/etc/opkg/distfeeds.conf"

"opkg update" is successful.  
Not Good but OK.

If you want to look specific status of opkg,  
hit "opkg --verbosity=3 update"

```
Downloading http://downloads.openwrt.org/snapshots/targets/bcm27xx/bcm2711/packages/Packages.gz
opkg_download: Setting environment variable: http_proxy = http://MyCompanyProxyServerIP/.
opkg_download: Setting environment variable: no_proxy = 127.0.0.1, localhost

Collected errors:
 * opkg_conf_set_option: Unrecognized option: https_proxy=http://MyCompanyProxyServerIP/

```

Thank you

---

<div class="post-metadata">

**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\
**Post date:** [February 5, 2021, 8:42am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/6 "2021-02-05T08:42:18Z")

</div>

ok,

so the cert wasn't for authenticating to the proxy, but for https to work 🙂

---

<div class="post-metadata">

**Author:** ![system](https://forum.openwrt.org/uploads/default/original/3X/7/4/740520c71f00039bbf001045c682f0ecb25e905a.png) [@system](https://forum.openwrt.org/u/system)\
**Post date:** [February 15, 2021, 8:43am UTC](https://forum.openwrt.org/t/i-need-connect-proxy-server-with-certification/87648/7 "2021-02-15T08:43:07Z")

</div>

This topic was automatically closed 0 minutes after the last reply. New replies are no longer allowed.
