[squid-users] Squid 3 reverse SSL gateway error

From: Khetan Gajjar <khetan@dont-contact.us>
Date: Thu, 9 Oct 2003 12:05:55 +0200 (SAST)

Hi.

I have a Squid 3 PRE3-20031003 machine, which I'm using to front
an IIS-based application server. I can get to the front page of the
server, and access any static content on the server, but trying to
access any dynamic content on the server results in the IIS server
getting the request, sending it to Squid, and Squid showing the
POST request, but nothing thereafter. I've tried switching on debug
levels debug_options ALL,1 17,3 15,3 23,3 46,3 55,3 56,3 57,3 58,3
61,3 but that hasn't revealed much of use.

I am enclosing the configuration file, in case I'm missing anything.
I had tried this with an August build, and I saw that the changelog
showed changes in the SSL-proxying code, which I thought would fix
the problem, but it didn't. Any suggestions ?

Squid configuration :

https_port the.squidbox.ip.address:443 accel defaultsite=the.real.site.name cert=/usr/local/squid/etc/certificates/the_world.crt key=/usr/local/squid/etc/certificates/the_world.pem protocol=https

sslproxy_client_certificate /usr/local/squid/etc/certificates/the_portal.crt
sslproxy_client_key /usr/local/squid/etc/certificates/the_portal.pem
sslproxy_flags DONT_VERIFY_PEER

icp_port 0

cache_peer the.real.site.name parent 443 0 no-query originserver ssl name=portal-ssl sslflags=DONT_VERIFY_PEER proxy-only default forceddomain=the.real.site.name
acl https proto https
cache_peer_access portal-ssl allow https

acl all src 0.0.0.0/0.0.0.0
http_access allow all
http_reply_access allow all
icp_access deny all

never_direct allow all

redirect_rewrites_host_header off
httpd_accel_single_host on

debug_options ALL,1 17,3 15,3 23,3 46,3 55,3 56,3 57,3 58,3 61,3

Khetan Gajjar.

--
khetan@os.org.za
Received on Thu Oct 09 2003 - 04:06:31 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:20:26 MST