Re: [squid-users] squid proxy authentiaction by using port 443

From: Christoph hanle <christoph.hanle@dont-contact.us>
Date: Sat, 09 Jul 2005 23:01:10 +0200

Matus UHLAR - fantomas schrieb:
> On 09.07 12:20, Christoph hanle wrote:
>> I am using the version 2.5.STABLE7 with PAM-authentification.
>> By testing skype i found, that skype can connect without username and
>> password over port 443. then i have tested https://www.ccc.de/ and i
>> have seen, that i also need no username and password.
>
> do you connect thee using squid?
> If yes, then probably your acl's are wrong.
>
>> Has someone an idea or hint to fix it, or is this in priciple not
>> possible. (connection is secure started and squid or the
>> authentication-module canīt be the man_in_the_middle ?)
>
> proxying HTTPS means forwarding TCP connection. Application connects proxy
> and ask it to
>
> CONNECT host:port HTTP/1.0
>
> I think that authentication at this level is possible. So it's probably
> about your acl's
>
Correct. I have found a big fault in the distribution (Eisfair).
Received on Sat Jul 09 2005 - 15:02:18 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Aug 01 2005 - 12:00:02 MDT