Re: [squid-users] Denied pages for HTTPS requests

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 15 May 2013 02:07:48 +1200

On 15/05/2013 1:59 a.m., FredB wrote:
>> Objet: Re: [squid-users] Denied pages for HTTPS requests
>>
>> Hi,
>>
>> browsers are not reacting as you expect with a redirection after a
>> https ( request with method CONNECT ). They do not follow the
>> redirection.
>>
> Arrgh, So there is no way to add a simple page or a message ? Most of the times the users are confused with blank page.

WIth 307 they are supposed to repeat the CONNECT to the new address.
Which can be a problem when you are changing protocols.

303 is probably your best bet for CONNECT. Many of the browsers simply
reject anything other than successful tunnel opening. But at least 303
specifies that a GET should be used when the redirect is followed. If
you luck out and the client has a browser which does follow the redirect
(one or two used to, not sure if any do now) it has a chance of working.
Just a chance, most still will throw up their "friendly" alternative
annoyance.

Amos
Received on Tue May 14 2013 - 14:08:04 MDT

This archive was generated by hypermail 2.2.0 : Tue May 14 2013 - 12:00:05 MDT