Re: [squid-users] squid and java applet and certificates

Hi Chris,

unfortunately this works when we bypass the squid box.

I tried it with:

acl campus url_regex ^http://www.campusdirect.gc.ca
always_direct allow campus

but this does not solve the problem :(.

Regards,
Martin

On Wednesday 28 September 2005 12:39, Chris Robertson wrote:
> > -----Original Message-----
> > From: Martin Kobele [mailto:martin.kobele@netsweeper.com]
> > Sent: Wednesday, September 28, 2005 5:14 AM
> > To: squid-users@squid-cache.org
> > Subject: [squid-users] squid and java applet and certificates
> >
> >
> > Hi,
> >
> > we experience the following issue:
> > We go to a webpage containing a java applet, but it fails.
> >
> > Here is a snippet of the squid access log.
> > There are a total of 9 requests for .class file for the Applet. The
> > proxy received the first and the last requests successfully as they are
> > indicated by HTTP code 200. However, the proxy received HTTP code 400
> > for the others in between, which means the Proxy cannot load them
> > successfully.
> >
> > 1126121818.965 37 10.36.56.43 TCP_MISS/200 2123 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/swingCheck.class -
> > DIRECT/198.103.238.143 application/octet-stream
> > 1126121819.275 28 10.36.56.43 TCP_MISS/404 1882 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/javax/swing/JApplet.cl
> >ass - DIRECT/198.103.238.143 text/html
>
> 404 means "File not found". That's exactly what I get if I try to reach
> this URL without a proxy:
>
> [admin admin]$ telnet www.campusdirect.gc.ca 80
> Trying 198.103.238.143...
> Connected to www.campusdirect.gc.ca.
> Escape character is '^]'.
> GET
> /SkillSoft/cbtlib/jcb/jands/javax/swing/plaf/basic/resources/basic_en.class
> HTTP/1.0
>
> HTTP/1.1 404 Object Not Found
> Server: Microsoft-IIS/5.0
> Date: Wed, 28 Sep 2005 16:37:57 GMT
> Content-Length: 4040
> Content-Type: text/html
>
> This is not a squid problem. These applets are missing on the campusdirect
> server.
>
> > 1126121900.347 26 10.36.56.43 TCP_MISS/404 1882 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/plaf
> >/basic/resources/basic_en_US.class - DIRECT/198.103.238.143 text/html
> > 1126121901.054 50 10.36.56.43 TCP_MISS/404 1882 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/plaf
> >/basic/resources/basic_en.class - DIRECT/198.103.238.143 text/html
> > 1126121901.697 4 10.36.56.43 TCP_NEGATIVE_HIT/404 1892 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/plaf
> >/basic/resources/basic_en_US.class - NONE/- text/html
> > 1126121902.322 3 10.36.56.43 TCP_NEGATIVE_HIT/404 1892 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/plaf
> >/basic/resources/basic_en.class - NONE/- text/html
> > 1126121903.050 119 10.36.56.43 TCP_MISS/404 1882 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/plaf
> >/basic/resources/basic.class - DIRECT/198.103.238.143 text/html
> > 1126121907.845 26 10.36.56.43 TCP_MISS/404 1882 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/com/cbt/jasmine/
> >Jasmine/JasmineAppleteanInfo.class - DIRECT/198.103.238.143 text/html
> > 1126121908.413 34 10.36.56.43 TCP_MISS/200 991 GET
> > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/com/cbt/jasmine/
> >Testing/ei.class - DIRECT/198.103.238.143 application/octet-stream
> >
> > Accessing one of these individual class files from the Browser generates
> > a Security Alert error message as shown below. It looks like when
> > accessing the www.campusdirect.gc.ca Web site thru the Proxy, the Proxy
> > cannot maintain the required security credential and forward it to the
> > Web site
> >
> >
> >
> > Has anybody experienced something similar?
> > Any hints how I could solve this issue?
> >
> > Any help is appreciated!
> >
> > Thank you very much!
> >
> > Regards,
> > Martin
>
> Chris

--