[squid-users] failing https requests

[Amos Jeffries]

On 25/04/20 3:46 am, Adam Weremczuk wrote:
> Hi all,
> 
> I run squid-3.5.27_3 on pfSense 2.4.4 as well as in house Sugar CRM server.
> 
> Recently Sugar license validation and updates checks made to
> https://updates.sugarcrm.com/heartbeat/soap.php started failing (no
> changes made at our end).
> 
> In squid logs requests only produce 2 lines:
> 
> 1587737506.670      0 192.168.5.30 TAG_NONE/400 4360 NONE
> error:invalid-request - HIER_NONE/- text/html
> 1587737506.978    301 192.168.5.30 TCP_MISS/301 464 POST
> http://updates.sugarcrm.com/heartbeat/soap.php -
> HIER_DIRECT/54.177.58.238 text/html
> 
> It looks like client error followed by a redirection to http.
> 
> Direct requests (no web proxy) as well as telnet, wget and curl work fine.
> 
> Could somebody explain what exactly the errors mean and why the requests
> fail?
> 

It means the client delivered some bytes which do not in any way conform
to HTTP request syntax. Not even similar.

The best thing to do is to get a full-packet capture and investigate
with wireshark what is going on.


Amos