Re: [squid-users] cache manager access from web

From: Matus UHLAR - fantomas <uhlar_at_fantomas.sk>
Date: Tue, 16 Feb 2010 14:20:15 +0100

> > On 14.02.10 01:32, J. Webster wrote:
> >> Would that work with:
> >> http_access deny manager CONNECT !SSL_ports

> On Mon, 15 Feb 2010 15:32:30 +0100, Matus UHLAR - fantomas
> <uhlar_at_fantomas.sk> wrote:
> > no, the manager is not fetched by CONNECT request (unless something is
> > broken).
> >
> > you need https_port directive and acl of type "myport", then allow
> > manager only on the https port. that should work.
> >
> > note that you should access manager directly not using the proxy.

On 16.02.10 13:59, Amos Jeffries wrote:
> You may (or may not) hit a problem after trying that because the cache mgr
> access uses its own protocol
> cache_object:// not htps://. An SSL tunnel with mgr access going through
> it should not have that problem but one never knows.

but it connect to standard HTTP port, right?

I think that the problem itself lies in cachemgr.cgi not being able to
connect via SSL

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody
Received on Tue Feb 16 2010 - 13:21:38 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 17 2010 - 12:00:04 MST