[squid-users] FW: Encrypted browser-Squid connection errors

[LEMRAZZEQ, Wadie]

I think this discussion had diverged from its subject 
So I refocus in our subject, gents

>I do not know exactly what you mean by "https proxy" in this context, but I suspect that you are using the wrong FireFox setting. The easily accessible "HTTPS proxy" setting in the "Configure Proxy Access to the Internet" dialog is _not_ what you >need! That setting configures a plain text HTTP proxy for handling HTTPS traffic. Very misleading, I know.

>You need a PAC file that tells FireFox to use an HTTPS proxy.

>See (again)
>https://wiki.squid-cache.org/Features/HTTPS#Encrypted_browser-Squid_connection
>which refers to https://bugzilla.mozilla.org/show_bug.cgi?id=378637#c68

Indeed, I am aware of this bug discussion and I did apply the PAC script into network.proxy.autoconfig_url, and it did not work
And what's more misleading is that the bug is tagged resolved, as if starting from firefox 33, it supports https proxy out of the box
But anyway, my next step is to use a PAC file, since it is the legacy method, if this doesn't work either I'm gonna use stunnels

Thank you everyone for your insights
Regards,

-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Rafael Akchurin
Sent: Thursday, October 20, 2022 7:34 AM
To: Grant Taylor; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] FW: Encrypted browser-Squid connection errors

***This mail has been sent by an external source***

The following line set in the Script Address box of the browser proxy configuration will help - no need for a PAC file for quick tests. Be sure to adjust the proxy name and port.

data:,function FindProxyForURL(u, h){return "HTTPS proxy.example.lan:8443";}

More info at https://webproxy.diladele.com/docs/network/secure_proxy/browsers/

Best regards,
Rafael Akchurin
Diladele B.V.

-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Grant Taylor
Sent: Thursday, October 20, 2022 2:39 AM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] FW: Encrypted browser-Squid connection errors

On 10/19/22 8:33 AM, Alex Rousskov wrote:
> I do not know exactly what you mean by "https proxy" in this context, 
> but I suspect that you are using the wrong FireFox setting. The easily 
> accessible "HTTPS proxy" setting in the "Configure Proxy Access to the 
> Internet" dialog is _not_ what you need! That setting configures a 
> plain text HTTP proxy for handling HTTPS traffic. Very misleading, I know.

+10 to the antiquated UI ~> worse UX.

> You need a PAC file that tells FireFox to use an HTTPS proxy.

I believe you can use the FoxyProxy add-on to manage this too.



--
Grant. . . .
unix || die

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.