[squid-users] Squid GET and POST problem

From: Valter Brazzini <valter.brazzini_at_provincia.fi.it>
Date: Wed, 16 Jul 2008 11:41:17 +0200

Hi everybody,

I use SQUID 2.6.STABLE3 on a Fedora Linux Core 2. My Squid uses squidGuard
to filter the url.

It works fine for every site except one.
This site is a bank site on https and it's used by my organization to signed
digitally on-line some documents.
The office of my organization that used this site have to sign more
documents at the same time and the application on the web site of the bank
works randomly. Sometimes it works correct for more and more documents but
sometimes we are lucky if it works for one document.

The problem doesn't happened if we do the same procedure with the same
client outside the proxy, directly in internet.

So we have debug the problem with the bank and we have found in the log of
the server of the bank that when it doesn't work is why the request from the
proxy is not correct.

Here an example of two correct operation of sign:
Myproxy-ip - - [15/Jul/2008:08:55:08 +0200]
"GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23
MAN%239672 HTTP/1.1" 200 3148 "-" "Mozilla/4.0 (Windows 2000 5.0)
Java/1.6.0_06"
Myproxy-ip - - [15/Jul/2008:08:55:11 +0200]
"POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2
3MAN%239672 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0)
Java/1.6.0_06"
Myproxy-ip - - [15/Jul/2008:08:55:11 +0200]
"GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23
MAN%239677 HTTP/1.1" 200 3172 "-" "Mozilla/4.0 (Windows 2000 5.0)
Java/1.6.0_06"
Myproxy-ip - - [15/Jul/2008:08:55:15 +0200]
"POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2
3MAN%239677 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0)
Java/1.6.0_06"

They are done by one GET follow by a POST.

Here an example of the problem during the operation of sign:
Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "User-Agent: Mozilla/4.0
(Windows 2000 5.0) Java/1.6.0_06" 302 - "-" "-"
Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "POST
/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23MAN%
239673 HTTP/1.1" 200 224 "-" "Mozilla/4.0 (Windows 2000 5.0) Java/1.6.0_06"

The GET request is malformed by the SQUID; the request instead to have the
GET command have the User-Agent, so we receive the error.

Can anyone help me to know why this problem happened to my SQUID in a random
way ?

Thanks for the Help

Valter
Received on Wed Jul 16 2008 - 09:42:56 MDT

This archive was generated by hypermail 2.2.0 : Thu Jul 17 2008 - 12:00:03 MDT