Re: [squid-users] Squid not delivering https sites

Hendrik Pahl wrote:
> Hi all,
>
> On debian etch, squid 2.6.5-6etch1 installed, were having this problem:
>
> Squid proxy is running on 192.168.0.1 for example. Now, we try surfing
> the web and accessing a https-enabled website - squid does not deliver
> it. This happens with any browser - firefox 3.0.3 and IE7 have been
> tested. FIrefox shows a message which says
> "/ssl_error_rx_record_too_long" - this is a general ssl error in
> firefox which means the webserver you are trying to access is using a
> flawed ssl implementation (see
> http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html)
>
> Since both tested browsers do not show any https-enabled websites, we
> tried accessing those sites without the proxy - this works fine.
>
> We couldn't figure where the error happens, but i must be squid i
> suppose. The config looks fine i believe. Since i am not that squid
> expert, tell me if i can provide some more information to solve this
> problem and to figure out what happens here.

Please try a newer Squid release. It may be a fixed bug.
The much-improved package from Lenny should install and run on Etch.

If it still occurs we have a better chance to track it down in the
current code.

Amos

-- 
Please use Squid 2.7.STABLE4 or 3.0.STABLE9