[squid-users] Host name stripped after authentication for https site

Hi,

Forgive me if this is a FAQ, but I've trawled the archives and can't find
a solution that fits.

I have Squid 2.5 Stable5 on a Fedora2 platform. I need to be able to
authenticate a user when they try to access a specific https address.

I have been using ncsa_auth and it works fine if I go to a site that
uses http://

Unfortunately, if I try to go to any https site, the challenge response
seems to work ok, but I get a 400 Invalid URL message because something
seems to have stripped the host name from the URL. If I refresh the screen
or click on the "URL:" link, the page is then correctly displayed.

I am using IE6 on XPP SP1 and have tried turning the assorted HTTP 1.1 flags

on and off to no avail.

This is an example URL:-
https://www.paypal.com/cgi-bin/webscr?cmd=_registration-run

This is the error screen:-
<<<<<<<-cut->>>>>>>

ERROR
The requested URL could not be retrieved

---------------------------------------------------------------------------
While trying to retrieve the URL: /cgi-bin/webscr?cmd=_registration-run

The following error was encountered:

Invalid URL
Some aspect of the requested URL is incorrect. Possible problems:

Missing or incorrect access protocol (should be `http://'' or similar)
Missing hostname
Illegal double-escape in the URL-Path
Illegal character in hostname; underscores are not allowed
Your cache administrator is root.

---------------------------------------------------------------------------

Generated Fri, 17 Sep 2004 17:12:55 GMT by jfc.trml.co.uk
(squid/2.5.STABLE5)
<<<<<<<-cut->>>>>>>

Here is the matching bit from the access.log :-

<<<<<<<-cut->>>>>>>
1095441174.444 0 192.168.0.11 TCP_DENIED/407 1676 CONNECT
www.paypal.com:443 - NONE/- text/html
1095441175.555 112 192.168.0.11 TCP_DENIED/400 1493 GET
/cgi-bin/webscr?cmd=_registration-run - NONE/- text/html
<<<<<<<-cut->>>>>>>

I've tried lots of different https sites and the result is always the same.

Suggestions please!

regards
 
Martyn Bright
Received on Fri Sep 17 2004 - 12:08:04 MDT