On 03/27/2016 11:59 PM, Alexandr Yatskin wrote:
> Directive "deny_info" didn't work when we blocked https site with option
> "ssl_bump".

"deny_info" is not compatible with the ssl_bump "terminate" action. The
"terminate" action means "Close client and server connections". It is
impossible to serve an [error] response on a closed connection.

IIRC, blocking the CONNECT request (fake or real) with http_access is
enough to force Squid to respond with an "access denied" error -- Squid
should automatically bump the client connection (if that is still
possible when the CONNECT request is blocked) to serve an error response.


HTH,

Alex.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to