<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">W dniu 17.05.2017 o 13:32, chcs pisze:<br>
</div>
<blockquote type="cite"
cite="mid:1495020726548-4682433.post@n4.nabble.com">
<pre wrap="">Firefox 53.0.2 , Chrome 58.3029 y Opera 44 display "Proxy Server Refused
Connection" page, instead of Squid custom error page, when connect to HTTPS
site which blocked by proxy server.
For example we try to connect to <a class="moz-txt-link-freetext" href="https://www.something.com">https://www.something.com</a> via Squid proxy
server which denied with 403 error this connect and send custom error page
with description of problem in older versions it's worked.
I'm using pfSense 2.4 (actual version squid 3.5.24).
Reproducible: Always
Steps to Reproduce:
1. Configure Firefox to use proxy server (SSL Proxy).
2. HTTPS/SSL Interception , Enable SSL filtering, splice all, CA: Let's
Encript autority
3. Try to connect to HTTPS site, which will be blocked by proxy server
Actual Results:
Firefox will display "Page Load Error" with description "Proxy Server
Refused Connection. Firefox is configured to use a proxy server that is
refusing connections."
If we connect to HTTPS site which not blocked by proxy server OR using CA
self-signed issuer , all works fine.
Expected Results:
Display proxy server error page with deny info.
--
View this message in context: <a class="moz-txt-link-freetext" href="http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-custom-error-page-tp4682433.html">http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-custom-error-page-tp4682433.html</a>
Sent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<p><font size="-1">This is intentional Firefox behavior since long
time ago:<br>
<a class="moz-txt-link-freetext" href="https://bugzilla.mozilla.org/show_bug.cgi?id=493699">https://bugzilla.mozilla.org/show_bug.cgi?id=493699</a><br>
<br>
Even if this bug is outdated, it is browser thing how to render
error pages, not squid's fault. <br>
You may try to redirect (instead of blocking) your blocked page
to your custom page that looks exactly like sqid's internal
error page, but then You will see browser's SSL security
warning, since page you have requested was SSL, and your error
page is not - the same goes for internal error pages.<br>
Proxies error pages are nowadays usually replaced by browsers
due to security reasons in case of SSL pages. <br>
</font></p>
<p><font size="-1">If your custom-pretending-to-be-squid's-internal
page would be SSL with valid cert, my guess is your problem is
solved. </font><br>
</p>
<pre class="moz-signature" cols="72">--
Greets, Dijx</pre>
</body>
</html>