Re: [squid-users] squid and java applet and certificates

From: Martin Kobele <martin.kobele@dont-contact.us>
Date: Wed, 28 Sep 2005 13:42:55 -0400

Hi,

I think you need to login on that page first in order to be able to retrieve
those files. Entrust Certificate is used for the login.

Regards,
Martin

On Wednesday 28 September 2005 13:30, Martin Kobele wrote:
> Hi Chris,
>
> unfortunately this works when we bypass the squid box.
>
> I tried it with:
>
> acl campus url_regex ^http://www.campusdirect.gc.ca
> always_direct allow campus
>
> but this does not solve the problem :(.
>
>
> Regards,
> Martin
>
> On Wednesday 28 September 2005 12:39, Chris Robertson wrote:
> > > -----Original Message-----
> > > From: Martin Kobele [mailto:martin.kobele@netsweeper.com]
> > > Sent: Wednesday, September 28, 2005 5:14 AM
> > > To: squid-users@squid-cache.org
> > > Subject: [squid-users] squid and java applet and certificates
> > >
> > >
> > > Hi,
> > >
> > > we experience the following issue:
> > > We go to a webpage containing a java applet, but it fails.
> > >
> > > Here is a snippet of the squid access log.
> > > There are a total of 9 requests for .class file for the Applet. The
> > > proxy received the first and the last requests successfully as they are
> > > indicated by HTTP code 200. However, the proxy received HTTP code 400
> > > for the others in between, which means the Proxy cannot load them
> > > successfully.
> > >
> > > 1126121818.965 37 10.36.56.43 TCP_MISS/200 2123 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/swingCheck.class -
> > > DIRECT/198.103.238.143 application/octet-stream
> > > 1126121819.275 28 10.36.56.43 TCP_MISS/404 1882 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/javax/swing/JApplet.
> > >cl ass - DIRECT/198.103.238.143 text/html
> >
> > 404 means "File not found". That's exactly what I get if I try to reach
> > this URL without a proxy:
> >
> > [admin admin]$ telnet www.campusdirect.gc.ca 80
> > Trying 198.103.238.143...
> > Connected to www.campusdirect.gc.ca.
> > Escape character is '^]'.
> > GET
> > /SkillSoft/cbtlib/jcb/jands/javax/swing/plaf/basic/resources/basic_en.cla
> >ss HTTP/1.0
> >
> > HTTP/1.1 404 Object Not Found
> > Server: Microsoft-IIS/5.0
> > Date: Wed, 28 Sep 2005 16:37:57 GMT
> > Content-Length: 4040
> > Content-Type: text/html
> >
> > This is not a squid problem. These applets are missing on the
> > campusdirect server.
> >
> > > 1126121900.347 26 10.36.56.43 TCP_MISS/404 1882 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/pl
> > >af /basic/resources/basic_en_US.class - DIRECT/198.103.238.143 text/html
> > > 1126121901.054 50 10.36.56.43 TCP_MISS/404 1882 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/pl
> > >af /basic/resources/basic_en.class - DIRECT/198.103.238.143 text/html
> > > 1126121901.697 4 10.36.56.43 TCP_NEGATIVE_HIT/404 1892 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/pl
> > >af /basic/resources/basic_en_US.class - NONE/- text/html
> > > 1126121902.322 3 10.36.56.43 TCP_NEGATIVE_HIT/404 1892 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/pl
> > >af /basic/resources/basic_en.class - NONE/- text/html
> > > 1126121903.050 119 10.36.56.43 TCP_MISS/404 1882 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/javax/swing/pl
> > >af /basic/resources/basic.class - DIRECT/198.103.238.143 text/html
> > > 1126121907.845 26 10.36.56.43 TCP_MISS/404 1882 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/com/cbt/jasmin
> > >e/ Jasmine/JasmineAppleteanInfo.class - DIRECT/198.103.238.143 text/html
> > > 1126121908.413 34 10.36.56.43 TCP_MISS/200 991 GET
> > > http://www.campusdirect.gc.ca/SkillSoft/cbtlib/jcb/jands/com/cbt/jasmin
> > >e/ Testing/ei.class - DIRECT/198.103.238.143 application/octet-stream
> > >
> > > Accessing one of these individual class files from the Browser
> > > generates a Security Alert error message as shown below. It looks like
> > > when accessing the www.campusdirect.gc.ca Web site thru the Proxy, the
> > > Proxy cannot maintain the required security credential and forward it
> > > to the Web site
> > >
> > >
> > >
> > > Has anybody experienced something similar?
> > > Any hints how I could solve this issue?
> > >
> > > Any help is appreciated!
> > >
> > > Thank you very much!
> > >
> > > Regards,
> > > Martin
> >
> > Chris
Received on Wed Sep 28 2005 - 11:43:16 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Oct 01 2005 - 12:00:04 MDT