RE: [squid-users] No access to HTTPS sites and funny error page.

From: Andre Labuschagne <alabuschagne@dont-contact.us>
Date: Thu, 2 Mar 2006 10:49:04 +0200

>On 3/2/06, Andre Labuschagne <alabuschagne@rmbprivatebank.com> wrote:
>> I am fairly new at running Squid and we are currently evaluating
>> moving from ISA server to Squid. It now seems as if there is some
>> difficulty in running Squid with https sites.

>How are the clients configured to reach the proxy?
>e.g. manually, with a PAC file, using transparent "interception", etc.

The users all use IE5.5 or higher and we have Active Directory, so we
use a Group Policy to send the proxy settings.

>With the switch from ISA to Squid, are there any changes made to the
client configuration?

Other than an IP address change everything is still the same.

>> I understand the concept of Squid effectively just passing through
>> connections to https sites without impacting the data at all, but on
>> our ISA server access to internet bank sites is permitted with no
problem.
>> On squid the response is slow and frequently the client gets a "While

>> trying to retrieve the URL: failed:443". I have tried to Google with
>> failed:443 but no results.

>So for the banking sites you're seeing log lines like this?

>1141285236.662 28014 10.42.8.4.252 TCP_MISS/200 25642 CONNECT
>secure.somebank.com:443 - DIRECT/4.24.117.9 -

Yes, this is exactly what I am seeing.

Legal disclaimer:
The views expressed in this email are, unless otherwise stated, those of the author and not those of the FirstRand Banking Group (Reg. No. 1929/001225/06) or its management. The information in this e-mail is confidential and is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted in reliance on this, is prohibited and may be unlawful. Whilst all reasonable steps are taken to ensure the accuracy and integrity of information and data transmitted electronically and to preserve the confidentiality thereof, no liability or responsibility whatsoever is accepted if information is, for whatever reason, corrupted or does not reach its intended destination.

RMB Private Bank, a division of FirstRand Bank Limited, is an Authorised Financial Services Provider.
Received on Thu Mar 02 2006 - 01:49:38 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST