[squid-users] https full url

[Amos Jeffries]

On 15/01/2016 2:08 p.m., xxiao8 wrote:
> In Squid http-redirector can get access to the full url, for https
> sslbump only gives us the host(https://host), to get a full
> url(https://host/path), are the only choices icap/ecap for content
> filtering? in this case I really don't care about the https content
> payload, just its http header that contains the full URL.

ICAP/eCAP has nothing to do with it.

The URL path is encrypted, so only available *after* the "bump" decrypt
has happened.

Before the decrypt Squid only has access to the authority-form URI.
<http://tools.ietf.org/html/rfc7230#section-5.3.3>


Amos