<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
You using wrong and extremal unspecific manual.<br>
<br>
Feel free to use our good manuals:<br>
<br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples">http://wiki.squid-cache.org/ConfigExamples</a><br>
<br>
<br>
20.06.2016 20:02, Jobin George пишет:<br>
<span style="white-space: pre;">><br>
> Hi,<br>
><br>
> <br>
><br>
> I am trying to setup squid3 as an HTTPS proxy using the
tutorial given [here][1]. I have properly setup the proxy settings
in my browser and when I try to hit **HTTP** web sites, I am able
to connect successfully. However, I keep getting a "Connection
timed out error" whenever I hit an **HTTPS** protocol web site and
the following error in my `/var/log/squid3/cache.log`:<br>
><br>
> <br>
><br>
> 2016/06/20 19:12:47| NF getsockopt(SO_ORIGINAL_DST)
failed on local=<local_ip_address>:3129
remote=<remote_ip_address>:55209 FD 8 flags=33: (92)
Protocol not available<br>
><br>
> <br>
><br>
> Here is my /etc/squid3/squid.conf file (commented lines
removed for brevity):<br>
><br>
> <br>
><br>
>
--------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
><br>
> <br>
><br>
> auth_param basic program /usr/lib/squid3/basic_ncsa_auth
/usr/etc/passwd<br>
><br>
> auth_param basic casesensitive off<br>
><br>
> auth_param basic credentialsttl 2 hours<br>
><br>
> <br>
><br>
> acl user_auth proxy_auth REQUIRED<br>
><br>
> <br>
><br>
> http_access allow user_auth<br>
><br>
> <br>
><br>
> acl SSL_ports port 443<br>
><br>
> acl Safe_ports port 80 # http<br>
><br>
> acl Safe_ports port 21 # ftp<br>
><br>
> acl Safe_ports port 443 # https<br>
><br>
> acl Safe_ports port 70 # gopher<br>
><br>
> acl Safe_ports port 210 # wais<br>
><br>
> acl Safe_ports port 1025-65535 # unregistered ports<br>
><br>
> acl Safe_ports port 280 # http-mgmt<br>
><br>
> acl Safe_ports port 488 # gss-http<br>
><br>
> acl Safe_ports port 591 # filemaker<br>
><br>
> acl Safe_ports port 777 # multiling http<br>
><br>
> acl CONNECT method CONNECT<br>
><br>
> <br>
><br>
> http_access allow localhost<br>
><br>
> http_access allow all<br>
><br>
> http_port 3127<br>
><br>
> <br>
><br>
> https_port 3129 intercept ssl-bump
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
key=/etc/squid3/example.com.private
cert=/etc/squid3/example.com.cert<br>
><br>
> <br>
><br>
> ssl_bump server-first all<br>
><br>
> sslproxy_flags DONT_VERIFY_PEER<br>
><br>
> sslproxy_cert_error deny all<br>
><br>
> sslcrtd_program /usr/lib/squid3/ssl_crtd -s
/var/lib/ssl_db -M 4MB sslcrtd_children 8 startup=1 idle=1<br>
><br>
> coredump_dir /var/spool/squid3<br>
><br>
> <br>
><br>
> refresh_pattern ^ftp: 1440 20% 10080<br>
><br>
> refresh_pattern ^gopher: 1440 0% 1440<br>
><br>
> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0<br>
><br>
> refresh_pattern (Release|Packages(.gz)*)$ 0
20% 2880<br>
><br>
> refresh_pattern . 0 20% 4320<br>
><br>
> <br>
><br>
> always_direct allow all<br>
><br>
> <br>
><br>
>
--------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
><br>
> <br>
><br>
> <br>
><br>
> I have spent a lot of time googling this error but could not
arrive at a solution which would configure squid as an HTTP proxy.
How do I get this working?<br>
><br>
> <br>
><br>
> <br>
><br>
> [1]: <a class="moz-txt-link-freetext" href="https://smoothnet.org/squid-proxy-with-ssl-bump/">https://smoothnet.org/squid-proxy-with-ssl-bump/</a><br>
><br>
> <br>
><br>
> Thanks & Regards<br>
><br>
> Jobin<br>
><br>
> <br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEbBAEBCAAGBQJXaACxAAoJENNXIZxhPexGb7gH+Iq3mOmeCH6memj7NKb2Yazo
<br>
I1PfzpjOi5/sh0gGfGEw2KG0nknT7Y4G7G6V6QxLH00PSlauUZ9syzsYmdWiImvA
<br>
o0Q8Aw5xyMUjhxVvVjl/ExJZdhUj86m+kruav6osArPdJGaLOpXiyhhvNef3zD0A
<br>
3d2D1xJhZP/JLYQUzDxssLxuphPxv8rx44e9H2MpoRN7llLFOEzURInVHwUNPrOE
<br>
keY8fYjHYb2DKlvkI9fkkLj75j4tdQYmwQo+wiIbXIUOyejfIJKYR3DSR5zzXMxX
<br>
nLq1LiJ1cZt/exNUwQ/hpEdByfKC/J9NoCPn++9VRCBWHenoSDPrs90k3SQ4CQ==
<br>
=zzoL
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>