LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Squid Cache and HTTPS problem (https://www.linuxquestions.org/questions/linux-server-73/squid-cache-and-https-problem-844168/)

nubix 11-14-2010 04:56 AM

Squid Cache and HTTPS problem
 
Hi everybody,

I have a squid acceleration server, that is the frontend to some of my backend web servers. Usually my websites are accessible via HTTP, but sometimes I use HTTPS, which I know squid supports.

I have a Windows server running two asp.net SOAP web services - Web service number one is old and running on ipaddress1:8443 (port 8443), and I planed to configure web service number two to work on ipaddress2:8443, on the same Windows web server.

(I'm aware one can run both of the web service sites on the same IP address and port with the help of virtual directories, but I'm don't want to do that, so that's not the issue I want to discuss)

When configuring the address ipaddress2:8443, I pointed it to web service number one in order to see if it works, before pointing it to the web service number two.
Then I tried to access the website through squid, and everything worked as expected - The ws2.example.com:8443 (web service two external address) seemed to work showing the web service one.
Glad I went to change the web server configuration, for pointing ipaddress2:8443 to web service number two. Then tried to access ws2.example.com again, but it still showed me the web service number one.

Of course I tried ctrl+F5.

Squid access log file shows:
Code:

TCP_MISS/304 416 GET http://ws2.example.com/ - DIRECT/ipaddress1
I tried to access https://ws2.example.com:8443 for several times since, but I see no corresponding entries in the log file.

I also tried today, removing ws2.example.com from 'hostname_aliases' in the squid.conf file, but I still get web service number one, with no new relevant log entries in the access log.


What is this squid behaviour means? Does it mean Squid opened a SSL tunnel, and now not able to close the connection, without violating the secure tunnel? If this is the case, what is the solution to my problem?


Thanks in advance!
Nubix

f14f21_2 11-14-2010 03:31 PM

hi
Code:

#vim /etc/squid/squid.conf
find and change "acl SSL_ports port 443" to "acl SSL_ports port 443 8443"
Code:

#/sbin/service squid reload


All times are GMT -5. The time now is 06:41 AM.