LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 09-18-2008, 02:14 AM   #1
linuxgurusa
Member
 
Registered: Mar 2008
Location: Namibia, Swakopmund
Distribution: Redhat, Fedora, Centos, ClearOS, Mandrake
Posts: 151

Rep: Reputation: 29
Squid SSL sites not working


Howzit guys

I need help on the following:

I have installed Fedora 9 on my outsourced server, running squid and other stuff.

The clients can browse with no issues at all, but we can not seem to browse any https sites ?

Standars squid configuration, minimal changes made to the squid conf file. it does have the http_access allow CONNECT SSL_ports line in, which is standard stuff.

Any ideas ? From the server itself I can connect to SSL sites ( telnet site on port 443 ) so no rules blocking it.

One thing ( if it would affect this ) I have two gateways on my network, my PC gateway is NOT set via this server / gateway, but surely that should not affect this, since I am asking squid to fetch the SSL site.

If I add an exclusion in my browser for any secure site then it works ( obvious, because then I go direct via my other gateway )

Any ideas ?
 
Old 09-18-2008, 02:26 AM   #2
datopdog
Member
 
Registered: Feb 2008
Location: JHB South Africa
Distribution: Centos, Kubuntu, Cross LFS, OpenSolaris
Posts: 806

Rep: Reputation: 41
Are you running a transparent proxy or not ? If you are running a transparent proxy and try and redirect port 443 to the proxy that will never work as its considered a man in the middle attack
 
Old 09-18-2008, 02:27 AM   #3
linuxgurusa
Member
 
Registered: Mar 2008
Location: Namibia, Swakopmund
Distribution: Redhat, Fedora, Centos, ClearOS, Mandrake
Posts: 151

Original Poster
Rep: Reputation: 29
Quote:
Originally Posted by datopdog View Post
Are you running a transparent proxy or not ? If you are running a transparent proxy and try and redirect port 443 to the proxy that will never work as its considered a man in the middle attack
HEY SA buddy ;-)

No transparent proxy no ( for the reason you mentioned )
 
Old 09-18-2008, 02:37 AM   #4
datopdog
Member
 
Registered: Feb 2008
Location: JHB South Africa
Distribution: Centos, Kubuntu, Cross LFS, OpenSolaris
Posts: 806

Rep: Reputation: 41
Then the configuration should work, my advice is go low level and do a dump and see what is actually happening.
 
Old 09-18-2008, 02:42 AM   #5
linuxgurusa
Member
 
Registered: Mar 2008
Location: Namibia, Swakopmund
Distribution: Redhat, Fedora, Centos, ClearOS, Mandrake
Posts: 151

Original Poster
Rep: Reputation: 29
Quote:
Originally Posted by datopdog View Post
Then the configuration should work, my advice is go low level and do a dump and see what is actually happening.
ARRRR ... was hoping I missed something stupid. It is weird, it should work yes .... can't understand why it is not working ...

Let me know if you think of something else ok ?
 
Old 10-02-2009, 08:48 AM   #6
rambca
LQ Newbie
 
Registered: Apr 2009
Posts: 4

Rep: Reputation: 0
https not working in squid

Quote:
Originally Posted by linuxgurusa View Post
ARRRR ... was hoping I missed something stupid. It is weird, it should work yes .... can't understand why it is not working ...

Let me know if you think of something else ok ?

post your squid.conf file. Usually that can be found in /etc/squid/
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid to block all the sites except 1 or 2 sites winxandlinx Linux - Networking 8 10-27-2010 02:53 AM
Squid block sites linuxnirmal Linux - Security 5 11-15-2006 10:59 AM
need help with apach virtual hosts ssl/non ssl sites danthach Linux - Networking 3 05-25-2006 06:40 AM
Pls check my iptables to see if i can login into hotmail and other SSL sites! debloxie Linux - Networking 1 01-26-2004 09:33 AM
How to have SSL on two different pages/sites? Manuel-H Linux - General 1 08-05-2003 08:53 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 10:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration