<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">21.01.2019 14:30, Dmitry Melekhov
пишет:<br>
</div>
<blockquote type="cite"
cite="mid:d8cc4b3a-bb76-130d-06a7-7d8c12c073cc@belkam.com">Your
Squid (or some helper) appears to be adding an
<br>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">"-/ffff...GETmyip=-myport=0"
suffix to the crt.sectigo.com URL,
<br>
resulting in a 404 response from that server.
<br>
</blockquote>
Yes, I suspected this, there is no helper which can add
this, as far as
<br>
I know
<br>
</blockquote>
</blockquote>
<br>
These mangled URLs are the expected result of a
URL-rewrite/redirector
<br>
helper written to use the long ago deprecated Squid-1.x
version of
<br>
helper protocol. Being used in a Squid configured to allow
whitespace in
<br>
URLs.
<br>
<br>
When those two features are combined there is no way for Squid
to
<br>
identify garbage after the end of URL in helper 1.0 syntax
response,
<br>
from a v2.x syntax response with whitespace in the URL.
<br>
<br>
Squid-3.5 and later are only backward compatible to the
Squid-2.0 helper
<br>
protocol. The older syntax is no longer supported at all.
<br>
<br>
<br>
Details of the Squid helper protocol can be found at
<br>
<a class="moz-txt-link-rfc2396E" href="https://wiki.squid-cache.org/Features/AddonHelpers#URL_manipulation"><https://wiki.squid-cache.org/Features/AddonHelpers#URL_manipulation></a>.
<br>
<br>
</blockquote>
<br>
<br>
Thank you!
<br>
<br>
You are absolutely right.
<br>
<br>
This is redirector, if I disable it, everything works.
<br>
<br>
Will contact redirector developer.
<br>
</blockquote>
<br>
<br>
There is new rejik (rejik.ru) version, if somebody uses it, you
can solve this problem by upgrade.
<br>
<br>
</blockquote>
<p><br>
</p>
<p>btw, according to redirector developer problem is in lack of ipv6
support.</p>
<p>Is there any reasons squid sends <a
class="moz-txt-link-freetext"
href="http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt-/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff-GETmyip=-myport=0">ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
<font color="#000000">to redirector?</font></a></p>
<p><br>
</p>
<p>Thank you! <br>
</p>
<br>
</body>
</html>