[squid-users] http request header must use hostname

Amos Jeffries squid3 at treenet.co.nz
Mon Dec 7 07:49:22 UTC 2015


On 7/12/2015 5:41 p.m., Walter H. wrote:
> On 07.12.2015 00:21, Amos Jeffries wrote:
>> Getting complicated...
>>
>> So xxiao8, why does one want to censor these requests anyway?
>>
>> Amos
> try to connect natively with the IP-Address instead of the hostname ...
> the SSL certificate of the host itself prevents the connection without
> message in the user agent ...
> 
> TLS code: SQUID_X509_V_ERR_DOMAIN_MISMATCH

xxiao was asking about http:// plain-text scope. TLS bugs in client UA
(sending SNI with raw-IP values) are irrelevant there.

Amos



More information about the squid-users mailing list