authenticate_ttl 3 seconds authenticate_ip_ttl 3 seconds acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl valid_dst dstdomain .kidaro.com http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all icp_access allow all http_port 80 vhost vport https_port 443 cert=c:/ssl/certs/certificate.pem key=C:/ssl/keys/squidkey.pem cache_peer images.test.com parent 8050 0 originserver default login=PASS hierarchy_stoplist cgi-bin ? maximum_object_size 4096000000 access_log c:/squid/var/logs/access.log squid debug_options ALL,9 acl QUERY urlpath_regex cgi-bin \? cache deny QUERY refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 acl apache rep_header Server ^Apache broken_vary_encoding allow apache visible_hostname tomer_Cache coredump_dir c:/squid/var/cache Thank you! -----Original Message----- From: Guido Serassio [mailto:guido.serassio@xxxxxxxxxxxxxxxxx] Sent: Monday, February 04, 2008 22:41 PM To: Tomer Brand; squid-users@xxxxxxxxxxxxxxx Subject: Re: Squid Win32 SSL version Hi, At 11:05 04/02/2008, Tomer Brand wrote: >Hi All, > >I am trying to run SQUID as reverse proxy with SSL. >I downloaded 2.6.STABLE18 with SSL support from >http://squid-mirror.acmeconsulting.it/download/dl-squid.html >I copied: > - ssleay32.dll > - libeay32.dll > >To system32 and created a certificate using OpenSSL. > >SQUID process gets terminated when the proxy machine gets HTTPS request >(Working great for HTTP) with the following message: > >OPENSSL_Uplink(100EB010,07): no OPENSSL_Applink > >Any idea? As you can read, the SSL enabled binaries are declared "experimental". There are two reasons for this: - The SSL binaries are automatically generated during a release without the test of the SSL functionality - I use pre-built Windows OpenSSL libraries, out of my quality control. Please, do you could send to me the SSL section of your squid.conf , so I can do some testing? Regards Guido - ======================================================== Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY Tel. : +39.011.9530135 Fax. : +39.011.9781115 Email: guido.serassio@xxxxxxxxxxxxxxxxx WWW: http://www.acmeconsulting.it/
