Re: [squid-users] Problem with Authentication with certs

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 21 Apr 2004 14:40:14 +0200 (CEST)

On Tue, 20 Apr 2004 bh@tronstar.com wrote:

> Recently, we have run into problems with certain sites. These are sites
> that use https, but require the user to accept a PKI certificate before
> they can access the site. On the squid proxy with authentication, the
> user does not get prompted to accept the certificate and gets a connection
> failure message. The entries in access.log are 407 errors which I
> normally see on a failed authentication. Using the same computer and
> browser, I can point to another squid proxy that does not use
> authentication and I get prompted for the certificate just fine. I can
> point to a netscape proxy (no authentication) and it works.

Sounds like a browser bug. Probably the browser gets paniced if it needs
to both provide proxy authentication and ask the user about a
certificate once the authentication has completed..

Try allowing access to these sites without requiring authentication.

Regards
Henrik
Received on Wed Apr 21 2004 - 06:40:17 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Apr 30 2004 - 12:00:02 MDT