Re: [squid-users] Invalid request error of Squid 2.6 PRE3 https on Windows.

From: fulan Peng <fulanpeng@dont-contact.us>
Date: Mon, 28 Aug 2006 09:01:34 -0400

Yes, I have setup https reverse mode.
The following is my squid.conf file. Please help me to see if any
problem in it. If I type http://localhost in the browser address line,
it works. If I type https://localhost, it asked my to confirm the
certificate, then a invalid request error page.

http_port 127.0.0.1:80 vhost vport
cache_peer zyzg.org.ru parent 80 0 originserver
https_port 443 cert=/usr/squid/etc/cert.pem key=/usr/squid/etc/key.pem
cache_peer breakevilaxis.org parent 80 0 originserver
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
access_log c:/squid/var/logs/access.log squid
debug_options ALL,9
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
http_reply_access allow all
icp_access allow all
visible_hostname ddint.org
coredump_dir c:/squid/var/cache

On 8/28/06, Henrik Nordstrom <henrik@henriknordstrom.net> wrote:
> On Mon, 2006-08-28 at 08:07 -0400, fulan Peng wrote:
> > Hi,
> > I have compiled Squid2.6PRE3 in Cygwin on Windows XP SP2. The http is
> > ok but there is a "invalid request" error for the https accelorator
> > mode.
>
> Have you set your https_port proper for accelerator/reverse proxy
> operation? Minimum defaultsite= should be specified (in addition to
> certificates etc..)
>
> Regards
> Henrik
>
>
Received on Mon Aug 28 2006 - 07:01:38 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Sep 01 2006 - 12:00:02 MDT