Re: [squid-users] Odd "https" behaviour.

From: Tim Neto <tneto@dont-contact.us>
Date: Thu, 18 Mar 2004 10:11:17 -0500

Hello Henrik,

Henrik Nordstrom wrote:

>On Wed, 17 Mar 2004, Tim Neto wrote:
>
>
>
>>--------------------------------------------------------------------------------------------------------------------------------------------------------------
>>1079532258.813 0 172.16.1.13 TCP_DENIED/407 1725 CONNECT
>>www.komatsuamerica.net:443 - NONE/- text/html
>>1079532261.705 878 172.16.1.13 TCP_DENIED/403 1453 GET
>>http://www.komatsuamerica.net/_mem_bin/applicationLogin.asp? - NONE/
>>-text/html
>>--------------------------------------------------------------------------------------------------------------------------------------------------------------
>>
>>Any ideas as to why Squid is changing the request from a "https" request
>>to a non-secure "http" request.
>>
>>
>
>Looking again at your data, and it very much looks like you are using a
>broken browser which "forgets" to use https if authentication is required.
>
>
>
>>We have several sites that are only secure sites that our users need to
>>access. If the user first goes to a non-secure web site, access to the
>>secure web site works.
>>
>>
>
>Also makes sense given the above as the proxy authentication then gets
>negotiated before the user tries to visit a https site, so the bug in the
>browser is avoided.
>
>Try using another browser and/or the latest security updates to your
>browser.
>
>Regards
>Henrik
>
>
>

Okay, I accept the browser assessment. However, the Komatsu America
application is a Visual Studio 6.0 application. (I doubled checked
after my initial post.) The problem is also noticed when accessing
Secure HTTP web sites with Internet Explorer. I'll see if I can get
some version numbers on IE.

Just to confirm then, the second line (time stamped: 1079532261.705) is
received from the web browser / web application. Is this a correct read
of the access log?

Thanks.

Tim

-- 
----------------------------------------------------------------------
Timothy E. Neto
 Computer Systems Engineer              Komatsu Canada Limited
 Ph#: 905-625-6292 x265                 1725B Sismet Road
 Fax: 905-625-6348                      Mississauga, Ontario, Canada
 E-Mail: tneto@komatsu.ca               L4W 1P9
----------------------------------------------------------------------
Received on Thu Mar 18 2004 - 08:11:25 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST