[squid-users] Fwd: Encrypted browser-squid connection

[Amos Jeffries]

On 12/11/18 3:45 PM, supraja sridhar wrote:
> 
> Can someone please help me debug this further?
> 

First thing to do is convert your config file to plain-text (ASCII).
Squid does not use RTF format config.


Second your definition for "all" ACL is incorrect. Remove it and use the
built-in one.

Also remove that "http_access allow all" and adjust the localnet ACL to
match your actual LAN range(s) you expect clients to be using. Both IPv4
and IPv6.

Then use "squid -k parse" to verify Squid is able to use your updated
config and a full restart Squid to make extra-sure it is only using that
config.


The next debugging to do is check the actual protocol with a wireshark
full-packet trace to see what the Browser is actually sending to the proxy.


Amos