Re: [squid-users] HTTPS Redirector Problem

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 18 Mar 2005 10:04:39 +0100 (CET)

On Wed, 16 Mar 2005, Ingo Neis wrote:

> when using with http the redirection works well (http://www.elster.de gets
> redirected) , when accessing this page via https my parent squid gets an
> request to get "http:443" which results in "unable to get Ip-Address for
> http:433"

You can not rewrite CONNECT requests in the same manner as normal
requests. A CONNECT request is a request to establish a tunnel via the
proxy, not a request for a given object.

At best you can rewrite CONNECT requests to another SSL server:port, but
in most cases this will make the client quite upset as the certificate
won't match the requested host.

You should be looking into using Squid access controls, returning a
HTTP error page with the block message.

Regards
Henrik
Received on Fri Mar 18 2005 - 02:04:41 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:02 MST