Use http:// for HTTPS_PROXY in unprivileged mode

HTTPS_PROXY should use http:// to establish CONNECT tunnels
to the proxy, not https://. This is the standard approach
for HTTP proxies handling HTTPS traffic via CONNECT.

The proxy will still perform TLS termination on the tunneled
connections for full request visibility.

Author: blink-so[bot]

jail/unprivileged.go

@@ -39,7 +39,7 @@ func (u *Unprivileged) Start() error {
 		"USER":        u.username,
 		"LOGNAME":     u.username,
 		"HTTP_PROXY":  fmt.Sprintf("http://localhost:%d", u.httpProxyPort),
-		"HTTPS_PROXY": fmt.Sprintf("https://localhost:%d", u.httpProxyPort),
+		"HTTPS_PROXY": fmt.Sprintf("http://localhost:%d", u.httpProxyPort),
 	})
 	return nil
 }