Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 09-30-2008, 09:10 AM   #1
LQ Newbie
Registered: Sep 2008
Posts: 5

Rep: Reputation: 0
Squid reverse proxy problem (HTTPS to HTTP)

I'm trying to set up a squid reverse proxy for an Outlook Web Access webmail server. I want the connection to squid to be encrypted with SSL, but the connection to the web server to be simple HTTP, ie:

client_browser <---HTTPS---> squid <---HTTP---> outlook_web_access

Below is the config that I currently have on squid:

https_port cert=/etc/shv-ssl/CertAuth/testcert.cert key=/etc/shv-ssl/CertAuth/testkey.pem
cache_peer parent 80 0 no-query originserver login=PASS front-end-https=on name=OWA

acl all src
acl manager proto cache_object
acl localhost src
acl to_localhost dst
acl SSL_ports port 443

# Deny requests to unknown ports
http_access deny !SSL_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports


cache_access_log /var/log/squid/reverse-access.log
cache_log /var/log/squid/reverse-cache.log
cache_store_log /var/log/squid/reverse-store.log
I was getting errors telling me that the access was denied due to ACL rules, but now I'm getting:

The following error was encountered:

    * Invalid Request 

Some aspect of the HTTP Request is invalid. Possible problems:

    * Missing or unknown request method
    * Missing URL
    * Missing HTTP Identifier (HTTP/1.0)
    * Request is too large
    * Content-Length missing for POST or PUT requests
    * Illegal character in hostname; underscores are not allowed
The squid access log has the following entry:
1222780606.494     46 TCP_DENIED/400 1586 GET error:invalid-request - NONE/- text/html
Can anyone give me any idea of where I'm going wrong?
Old 10-02-2008, 01:20 PM   #2
LQ Newbie
Registered: Aug 2006
Posts: 17

Rep: Reputation: 0
Thumbs down Doesn't seem possible

I tried the same with Apache and was unsuccessful.

I have a network camera that speaks only http, and I wanted to monitor my house from outside over https through a firewall running Apache. After several attempts, I concluded http and https are so different that a proxy server cannot easily convert.

So, I wrote a small CGI script that mimics the expected proxy(?) conversion. It works almost fine, but it is somewhat server (network camera) specific and it can't handle some IE browser-specific protocols.




Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid configuration question. Client => HTTPS => proxy => HTTP => webserver newhere Fedora 5 02-21-2009 01:33 PM
reverse Squid does HTTPS for hidden apache, how does PHP know? dlublink Linux - Server 1 08-21-2008 09:04 AM
Squid 2.6 Reverse Proxy from Squid(3128) to OrginServer(80) Not working rraj Linux - Server 0 06-06-2008 02:29 PM
HTTPS reverse proxy/VPN??? jantman Linux - Server 1 03-08-2008 11:57 PM
LXer: Linux configure pound reverse proxy for Apache http / https web server LXer Syndicated Linux News 0 12-14-2007 07:20 PM

All times are GMT -5. The time now is 08:09 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration