[squid-users] SSL Bump with HTTP Cache Peer Parent

mikio.kishi at gmail.com mikio.kishi at gmail.com
Sun Jul 14 05:33:42 UTC 2019


Hi all,

 https://www.spinics.net/lists/squid/msg90523.html

As mentioned in the above URL, I would like to use "SSL Bump with HTTP
Cache Peer Parent" as well.
However, still seems not be supported like the following.

- FwdState.cc (in squid-4.8 which is currect stable version)
   825  FwdState::connectStart()
   826  {
   827      assert(serverDestinations.size() > 0);
   828
   829      debugs(17, 3, "fwdConnectStart: " << entry->url());
   830
   831      request->hier.startPeerClock();
   832
   833      // Do not fowrward bumped connections to parent proxy unless it
is an
   834      // origin server
   835      if (serverDestinations[0]->getPeer() &&
!serverDestinations[0]->getPeer()->options.originserver &&
request->flags.sslBumped) {
   836          debugs(50, 4, "fwdConnectStart: Ssl bumped connections
through parent proxy are not allowed");
   837          ErrorState *anErr = new ErrorState(ERR_CANNOT_FORWARD,
Http::scServiceUnavailable, request);
   838          fail(anErr);
   839          self = NULL; // refcounted
   840          return;
   841      }

Do you have any plan to support that? or Are there any solutions for that ?

Regards,
--
Mikio Kishi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190714/22f83d7b/attachment.html>


More information about the squid-users mailing list