Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-18 Thread Sam Holden
On Wed, Sep 18, 2019 at 7:11 AM Amos Jeffries wrote: > > > All these *_port things are a red herring. The initial problem was > connections to the origin server using HTTPS. > > Connections to originserver peer do not send URL scheme, and use the > settings on the cache_peer directive as the proto

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-18 Thread Amos Jeffries
On 18/09/19 10:22 am, Alex Rousskov wrote: > On 9/17/19 5:02 PM, Sam Holden wrote: > >> When I have protocol=http is reports: >> 2019/09/17 20:08:55| Accepting reverse-proxy HTTP Socket connections > >> When I don't set the protocol is reports: >> 2019/09/17 20:17:38| Accepting reverse-proxy HTTP

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-17 Thread Alex Rousskov
On 9/17/19 5:02 PM, Sam Holden wrote: > When I have protocol=http is reports: > 2019/09/17 20:08:55| Accepting reverse-proxy HTTP Socket connections > When I don't set the protocol is reports: > 2019/09/17 20:17:38| Accepting reverse-proxy HTTPS Socket connections > So it seems to be following t

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-17 Thread Sam Holden
On Tue, Sep 17, 2019 at 4:07 PM Alex Rousskov wrote: > > On 9/17/19 2:07 PM, Sam Holden wrote: > > > https_port 4277 accel ... protocol=http > > > sees port 4227 act as an http port (no ssl) > > Assuming you meant "4277" when you said "4227" (or vice versa), your > statement sounds like an indicat

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-17 Thread Alex Rousskov
On 9/17/19 2:07 PM, Sam Holden wrote: > https_port 4277 accel ... protocol=http > sees port 4227 act as an http port (no ssl) Assuming you meant "4277" when you said "4227" (or vice versa), your statement sounds like an indication of a Squid bug to me: The "protocol" option is documented to affe

[squid-users] SSL termination problem - squid's requests using https

2019-09-17 Thread Sam Holden
I'm converting a reasonably large configuration from squid v3 to squid v4 and I'm having a problem with SSL termination. I'm clearly missing something but I haven't been able to work out what. I'm using openssl not gnutls. Using the following: https_port 4277 accel defaultsite= cert=/etc/pki/tls/