[squid-users] squid 4.5, can't download certificate?

[Dmitry Melekhov]

21.01.2019 14:30, Dmitry Melekhov пишет:
> Your Squid (or some helper) appears to be adding an
>>>>>> "-/ffff...GETmyip=-myport=0" suffix to the crt.sectigo.com URL,
>>>>>> resulting in a 404 response from that server.
>>>>> Yes, I suspected this, there is no helper which can add this, as 
>>>>> far as
>>>>> I know
>>>
>>> These mangled URLs are the expected result of a URL-rewrite/redirector
>>> helper written to use the long ago deprecated Squid-1.x version of
>>> helper protocol. Being used in a Squid configured to allow 
>>> whitespace in
>>> URLs.
>>>
>>> When those two features are combined there is no way for Squid to
>>> identify garbage after the end of URL in helper 1.0 syntax response,
>>> from a v2.x syntax response with whitespace in the URL.
>>>
>>> Squid-3.5 and later are only backward compatible to the Squid-2.0 
>>> helper
>>> protocol. The older syntax is no longer supported at all.
>>>
>>>
>>> Details of the Squid helper protocol can be found at
>>> <https://wiki.squid-cache.org/Features/AddonHelpers#URL_manipulation>.
>>>
>>
>>
>> Thank you!
>>
>> You are absolutely right.
>>
>> This is redirector, if I disable it, everything works.
>>
>> Will contact redirector developer.
>
>
> There is  new rejik (rejik.ru) version, if somebody uses it, you can 
> solve this problem by upgrade.
>

btw, according to redirector developer problem is in lack of ipv6 support.

Is there any reasons squid sends ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 
to redirector?


Thank you!


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190121/b16a8525/attachment.html>