[squid-users] Strange behaviour with Chrome (client OS = WinXP x64) ...

Amos Jeffries squid3 at treenet.co.nz
Sun Feb 1 18:46:03 UTC 2015


On 2/02/2015 7:16 a.m., Yuri Voinov wrote:
> 
> 
> 01.02.2015 23:48, Walter H. пишет:
>> Hello,
> 
<snip>

>> acl ssl_bump_domains_bankingsites dstdomain banking.raiffeisen.at
> banking.ing-diba.at ebanking.easybank.at services.kepler.at
> www.kepler.at www.rcb.at
>> acl ssl_bump_domains_msftupdates dstdomain .update.microsoft.com
>> ssl_bump none ssl_bump_domains_bankingsites
>> ssl_bump none ssl_bump_domains_msftupdates
>> ssl_bump server-first all
> You do it wrong. You don't know site names BEFORE bump.
> 

No. His http_port settings are those which match a proxy being
configured explicitly in the brower, which means CONNECT messages with
domain name expected to be present.

It might not be, which could be the problem. But that can only known by
looking at the CONNECT request message itself.

Amos


More information about the squid-users mailing list