LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Squid not openinig htts site (https://www.linuxquestions.org/questions/linux-server-73/squid-not-openinig-htts-site-4175568988/)

anis123 02-02-2016 12:27 AM

Squid not openinig htts site
 
Dea all

i have Centos 6.5 with Squid Cache: Version 3.1.23 not opening https siet special i want to open http://ieeexplore.ieee.org/Xplore/home.jsp this site please help

configuration fiel is under
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl directurls url_regex ieeexplore.ieee.org/Xplore/home.jsp

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7 # RFC 4193 local private network range
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl SSL_ports port 80 8080
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http

acl CONNECT method CONNECT

visible_hostname proxy
#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access deny manager
#http_access allow Safe_ports
#http_access allow SSL_ports
# Deny requests to certain unsafe ports

http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
dns_nameservers 127.0.0.1 10.3.20.149


# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
#http_port 3128
http_port 8080
https_port 8080

fmattheus 02-02-2016 03:20 AM

I don't fully understand your question.
You say you want to access https, but you provide an http link (no 's').

In your config http_port and https_port are set to the same port. That can't work ...

anis123 02-02-2016 09:59 AM

Sorry for mistake .my squid working fine with http sites but it cant't open https site i use same port for http and https .its working fine in my other squid. please to access https sites throug squid

TB0ne 02-02-2016 10:10 AM

Quote:

Originally Posted by anis123 (Post 5491590)
Sorry for mistake .my squid working fine with http sites but it cant't open https site i use same port for http and https .its working fine in my other squid. please to access https sites throug squid

So, essentially what you asked before, not long ago, and never replied back to:
http://www.linuxquestions.org/questi...ic-4175568208/

If you're not going to respond, answer questions, or post details, there's not much point in posting a question in the first place. Further, you've been asking about Squid for FOUR YEARS at this point...have you read any of the documentation, or other answers you've received here in that time??
http://www.linuxquestions.org/questi...ything-941316/
http://www.linuxquestions.org/questi...es-4175468277/
http://www.linuxquestions.org/questi...ng-4175493639/
http://www.linuxquestions.org/questi...er-4175509734/

You have not responded to/closed/answered ANY of those previous threads...why should we assist you now? And again, squid is NOT for HTTPS, but for HTTP. And even though this is a DUPLICATE question (against LQ Rules), it makes less sense here, than it did before. Because since you say you have another one WORKING, then WHY can't you just look at it, and configure it the same way??? You quite obviously know how to do it, since it's ALREADY WORKING on another system.

Elizine 02-03-2016 01:04 AM

Are you able to establish a tcp handshake with port 443?

Code:

$ nc -zvw 1 host.here 443
Can you make a SSL handshake and view cert info?

Code:

$ openssl s_client -host host.here -port 443


All times are GMT -5. The time now is 03:24 AM.