[squid-users] 2 way SSL on a non standard SSL Port

[Bart Spedden]

Thank you so much Amos! You figured it out!

I was able to telnet to those ports from my localhost, but not from the
server where squid is installed. I'm working to get those ports opened now.

Thanks again!

On Mon, Nov 30, 2015 at 7:08 PM, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> On 1/12/2015 1:01 p.m., Bart Spedden wrote:
> > In the cache.log I have found the following:
> >
> > CONNECT tv1var.merchantlink-lab.com:8184 HTTP/1.1^M
> >
> > User-Agent: Java/1.8.0_05^M
> >
> > Host: tv1var.merchantlink-lab.com:8184^M
> >
> > Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2^M
> >
> > Proxy-Connection: keep-alive^M
> >
> > ^M
> >
> >
> > ----------
> >
> > 2015/11/30 17:18:47.517 kid1| 85,2| client_side_request.cc(741)
> > clientAccessCheckDone: The request CONNECT
> tv1var.merchantlink-lab.com:8184
> > is ALLOWED; last ACL checked: localnet
> >
> > 2015/11/30 17:18:47.517 kid1| 85,2| client_side_request.cc(717)
> > clientAccessCheck2: No adapted_http_access configuration. default: ALLOW
> >
> > 2015/11/30 17:18:47.517 kid1| 85,2| client_side_request.cc(741)
> > clientAccessCheckDone: The request CONNECT
> tv1var.merchantlink-lab.com:8184
> > is ALLOWED; last ACL checked: localnet
> >
> > 2015/11/30 17:18:47.517 kid1| 44,2| peer_select.cc(258)
> peerSelectDnsPaths:
> > Find IP destination for: tv1var.merchantlink-lab.com:8184' via
> > tv1var.merchantlink-lab.com
> >
> > 2015/11/30 17:18:47.533 kid1| 44,2| peer_select.cc(280)
> peerSelectDnsPaths:
> > Found sources for 'tv1var.merchantlink-lab.com:8184'
> >
> <snip>
> >
> > 2015/11/30 17:18:47.533 kid1| 44,2| peer_select.cc(286)
> > peerSelectDnsPaths:          DIRECT = local=0.0.0.0 remote=
> > 104.153.8.184:8184 flags=1
>
> So this one server destination has been found, and will be tried.
>
> >
> > 2015/11/30 17:18:47.533 kid1| 44,2| peer_select.cc(295)
> > peerSelectDnsPaths:        timedout = 0
> >
>
> But the TCP connect failed:
>
> > 2015/11/30 17:18:47.534 kid1| 4,2| errorpage.cc(1262) BuildContent: No
> > existing error page language negotiated for ERR_CONNECT_FAIL. Using
> default
> > error file.
> >
>
>
> At this point I suspect some external access crontol, such as a firewall
> is also blocking that unusual port.
>
> Amos
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>



-- 
Bart Spedden  |  Senior Developer
+1.720.210.7041  |
*bart.spedden at 3sharecorp.com <bart.spedden at 3sharecorp.com>*
3 | S H A R E  |  Adobe Digital Marketing Experts  |  An Adobe®  Business
Plus Level Solution PartnerConsulting  |  Training  |  Remote Operations
Management
<http://www.3sharecorp.com/en/services/rom.html>
<http://www.3sharecorp.com/en/services/rom.html>
<http://www.3sharecorp.com/en/services/rom.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151201/df7bf8a0/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rom-email-sig4_600x100.png
Type: image/png
Size: 16361 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151201/df7bf8a0/attachment-0001.png>