[squid-users] failing https requests
squid3 at treenet.co.nz
Fri Apr 24 15:57:40 UTC 2020
On 25/04/20 3:46 am, Adam Weremczuk wrote:
> Hi all,
> I run squid-3.5.27_3 on pfSense 2.4.4 as well as in house Sugar CRM server.
> Recently Sugar license validation and updates checks made to
> https://updates.sugarcrm.com/heartbeat/soap.php started failing (no
> changes made at our end).
> In squid logs requests only produce 2 lines:
> 1587737506.670 0 192.168.5.30 TAG_NONE/400 4360 NONE
> error:invalid-request - HIER_NONE/- text/html
> 1587737506.978 301 192.168.5.30 TCP_MISS/301 464 POST
> http://updates.sugarcrm.com/heartbeat/soap.php -
> HIER_DIRECT/22.214.171.124 text/html
> It looks like client error followed by a redirection to http.
> Direct requests (no web proxy) as well as telnet, wget and curl work fine.
> Could somebody explain what exactly the errors mean and why the requests
It means the client delivered some bytes which do not in any way conform
to HTTP request syntax. Not even similar.
The best thing to do is to get a full-packet capture and investigate
with wireshark what is going on.
More information about the squid-users