Re: SSL to virtual host

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Sun, 13 Dec 1998 15:13:49 +0100

Alastair Waddell wrote:

> The problem, when manually configuring to proxy https, is apparently
> with the content of the request upon reaching the secure server. This
> problem appears to exist as a result of some problem with squid or my
> squid.conf. It could be an apache problem but note that it works when
> using my parent squid directly.

I seriously doubt that this is a Squid problem. Squid CAN'T mess with
the request as it is encrypted by the client and only the origin site
can decrypt it. When seeing a CONNECT call to a SSL server Squid opens a
fully transparent TCP/IP tunnel to the origin site (or parent proxy if
not allowed to go direct).

CONNECT is a method browsers uses to open fully transparent tunnels to
origin servers for protocols not supported by the proxy (mainly SSL
which can't be proxied like HTTP).

---
Henrik Nordstrom
Spare time Squid hacker
Received on Sun Dec 13 1998 - 07:12:09 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:43:38 MST