[squid-users] https: fails with CONNECT error:invalid-request

Hi,

Squid newbie here with a problem regarding squid and HTTPS.
HTTP URLS work as desired. I've spent the past two days googling
and reading the archives, but still don't understand how to
build/configure Squid to do what I want.

Any pointers/help would be greatly appreciated.

Setup :

Remote office user ->
        Remote office Squid (squid-2.6.STABLE2) -> Company WAN ->
                HQ ISA2004 proxy server ->
                        External Sites

User (remote office) connects to an URL https://www.aaa.com
Browser is configured to use proxy server (Squid 2.6 STABLE 2, UnixWare
7.1.3)
Proxy server is at the remote office.

Squid forwards request to ISA2004 proxy server at main office
                "cache_peer 10.6.10.20 parent 8080 0 no-query default
no-digest"
ISA proxy server passes request on to the outside world.
User receives " The connection to www.aaa.com was interrupted while the
page was loading."
        
SQUID logs show " CONNECT error:invalid-request"

Squid was configured with:
./configure -q \
     --enable-delay-pools \
     --enable-cache-digests \
     --enable-poll \
     --disable-ident-lookups \
     --enable-truncate \
     --enable-agent-log \
     --enable-referer-log \
     --enable-default-err-language=English \
     --enable-err-languages=English

access.log:1158787213.443 0 10.31.129.28 TCP_DENIED/400 1381
CONNECT error:invalid-request - NONE/- text/html

cache.log:2006/09/20 17:20:13| storeKeyPrivate: CONNECT
error:invalid-request
cache.log:2006/09/20 17:20:13| errorConvert: %R --> 'CONNECT
www.ipledgeprogram.com:443 HTTP/1.1
cache.log:2006/09/20 17:20:13| The reply for CONNECT
error:invalid-request is ALLOWED, because it matched 'all'

store.log:1158787213.443 RELEASE -1 FFFFFFFF
637E356A235E6902243378ABCC05146A 400 1158787213 0 1158787213
text/html 1381/1381 CONNECT error:invalid-request
cvs9058[logs]

Tom Brand
Received on Wed Sep 20 2006 - 15:37:26 MDT