[squid-users] R: [squid-users] Squid GET and POST problem

Ok, thank you

-----Messaggio originale-----
Da: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Inviato: giovedì 17 luglio 2008 12:28
A: valter.brazzini_at_provincia.fi.it
Cc: squid-users_at_squid-cache.org
Oggetto: Re: [squid-users] Squid GET and POST problem

Valter Brazzini wrote:
> Hi everybody,
>
> I use SQUID 2.6.STABLE3 on a Fedora Linux Core 2. My Squid uses squidGuard
> to filter the url.
>
> It works fine for every site except one.
> This site is a bank site on https and it's used by my organization to
signed
> digitally on-line some documents.
> The office of my organization that used this site have to sign more
> documents at the same time and the application on the web site of the bank
> works randomly. Sometimes it works correct for more and more documents but
> sometimes we are lucky if it works for one document.
>
> The problem doesn't happened if we do the same procedure with the same
> client outside the proxy, directly in internet.
>
> So we have debug the problem with the bank and we have found in the log of
> the server of the bank that when it doesn't work is why the request from
the
> proxy is not correct.
>
> Here an example of two correct operation of sign:
> Myproxy-ip - - [15/Jul/2008:08:55:08 +0200]
>
"GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23
> MAN%239672 HTTP/1.1" 200 3148 "-" "Mozilla/4.0 (Windows 2000 5.0)
> Java/1.6.0_06"
> Myproxy-ip - - [15/Jul/2008:08:55:11 +0200]
>
"POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2
> 3MAN%239672 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0)
> Java/1.6.0_06"
> Myproxy-ip - - [15/Jul/2008:08:55:11 +0200]
>
"GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23
> MAN%239677 HTTP/1.1" 200 3172 "-" "Mozilla/4.0 (Windows 2000 5.0)
> Java/1.6.0_06"
> Myproxy-ip - - [15/Jul/2008:08:55:15 +0200]
>
"POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2
> 3MAN%239677 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0)
> Java/1.6.0_06"
>
> They are done by one GET follow by a POST.
>
> Here an example of the problem during the operation of sign:
> Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "User-Agent: Mozilla/4.0
> (Windows 2000 5.0) Java/1.6.0_06" 302 - "-" "-"
> Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "POST
>
/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23MAN%
> 239673 HTTP/1.1" 200 224 "-" "Mozilla/4.0 (Windows 2000 5.0)
Java/1.6.0_06"
>
> The GET request is malformed by the SQUID; the request instead to have the
> GET command have the User-Agent, so we receive the error.
>
> Can anyone help me to know why this problem happened to my SQUID in a
random
> way ?

Could be a few things. Probably one of the double-CR or unencoded-NULL
issues floating around.

Try an upgrade to recent squid to see if its one of the many we have
already solved.

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE7