Re: Bug in Squid+SSL, POST data sent encrypted with MSIE 6.0

Terence Haddock wrote:

> I have Squid-2.4.STABLE1 manually patched to include SSL gateway support
> from your Squid SSL project (using patch from 2001-05-04). I had a
> problem with POST requests over HTTPS, and was able to reproduct it with
> MSIE 6.0 running under Windows NT. From a packet dump, it appeared the
> POST data was being sent to the server encrypted, causing all sorts of
> havoc.

Not surprising as POST's are handled very differently in Squid-2.4 than
in Squid-HEAD that the patch is based upon, so if you backport changes
from HEAD you will have to deal with this. The reason why the patch does
not change pump.c is because there is no pump.c to change in the current
sources to start with.

If you want SSL support, you should get yourself a copy of Squid-HEAD
(2.5). The SSL support is included there in an integrated and tested
manner.

> And the problem went away. For my application, this is sufficent, but I
> do not know if this is a 100% fix, I.E. is pump.c used for other
> protocols, other methods, where fd_table[fd].read_method may not be
> initialized.

It is not a 100% fix. You will also experience hung connections and some
other problems fixed in the more current code (fix included in the third
"ssl" patch).

Most of these patches
Regards
Henrik Nordström
Squid Hacker
Received on Mon Nov 05 2001 - 16:46:47 MST