[squid-users] SSL gateway user error

From: ab cd <mailing.questions@dont-contact.us>
Date: Sat, 27 Jan 2007 12:14:10 -0500

hate to bother people on the list but i have hit a road block due to
very limited experience with squid other than a transparent cache on
my firewall. i have gone down the google route but i may not know
exactly what i am looking for.

i am currently attempting to use squid to become an SSL gateway/man in
the middle device for the outside world so that we have the ability to
monitor the traffic before it leaves the network.

internal_browser
---SSL_encrypt--->[squid(clear)proxy]---SSL_re-encrypt--->SSL sites on
Inet

config:
https_port 443 cert=/usr/local/etc/test_cert.pem key=/usr/local/etc/test_key.pem
ssl_unclean_shutdown on
acl all src 0.0.0.0/0.0.0.0
visible_hostname test.test.net
http_access allow all

error:
clientNegotiateSSL: Error negotiating SSL connection on FD 10:
error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request
(1/-1)

any help/advice/etc would be much appreciated.

thanks
Received on Sat Jan 27 2007 - 10:14:15 MST

This archive was generated by hypermail pre-2.1.9 : Thu Feb 01 2007 - 12:00:01 MST