Re: [squid-users] squid + auth + safari + SSL = TCP_DENIED/407

Gavin,

Can you attach the squid access log, openssl test prompts? Oh, and maybe
error.log

Thanks,

-- 
Banyan He
Network & Security Information System
banyan_at_rootong.com
On 5/1/09 12:11 AM, "Gavin McCullagh" <gavin.mccullagh_at_gcd.ie> wrote:
> Hi,
> 
> one of our Mac people has been complaining that he can't get into certain
> SSL sites.  I borrowed a MAC and found that these does indeed seem to be a
> problem, though apparently not on all SSL sites (a login on www.bebo.com)
> is an example that does give the problem.  I'm not sure of this but it
> looks like it might be where there's a POST request over SSL.
> 
> I noticed this:
> 
> http://www2.tr.squid-cache.org/mail-archive/squid-users/200709/0109.html
> 
> so I tried turning off authentication and it worked.
> 
> I'm using squid-2.6-stable18 which I'm well aware is old.  Is this a bug in
> squid or safari or is this known for sure?  Does anyone know if an upgrade
> to squid would sort it out?
> 
> If not, I may have to put in an ACL either to allow:
> 
>  - all macs to be unauthenticated
>  - all SSL to be unauthenticated
>  - all requests with safari browser strings using SSL to be unauthenticated
> 
> or something like that.  Has anyone had to do this?  Is there a known "best
> way"?
> 
> Thanks in advance,
> Gavin
> 
>