Ok, thank you -----Messaggio originale----- Da: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Inviato: giovedì 17 luglio 2008 12:28 A: valter.brazzini@xxxxxxxxxxxxxxx Cc: squid-users@xxxxxxxxxxxxxxx Oggetto: Re: Squid GET and POST problem Valter Brazzini wrote: > Hi everybody, > > I use SQUID 2.6.STABLE3 on a Fedora Linux Core 2. My Squid uses squidGuard > to filter the url. > > It works fine for every site except one. > This site is a bank site on https and it's used by my organization to signed > digitally on-line some documents. > The office of my organization that used this site have to sign more > documents at the same time and the application on the web site of the bank > works randomly. Sometimes it works correct for more and more documents but > sometimes we are lucky if it works for one document. > > The problem doesn't happened if we do the same procedure with the same > client outside the proxy, directly in internet. > > So we have debug the problem with the bank and we have found in the log of > the server of the bank that when it doesn't work is why the request from the > proxy is not correct. > > Here an example of two correct operation of sign: > Myproxy-ip - - [15/Jul/2008:08:55:08 +0200] > "GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23 > MAN%239672 HTTP/1.1" 200 3148 "-" "Mozilla/4.0 (Windows 2000 5.0) > Java/1.6.0_06" > Myproxy-ip - - [15/Jul/2008:08:55:11 +0200] > "POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2 > 3MAN%239672 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0) > Java/1.6.0_06" > Myproxy-ip - - [15/Jul/2008:08:55:11 +0200] > "GET/TesoWebSign/SeOrdToSign?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23 > MAN%239677 HTTP/1.1" 200 3172 "-" "Mozilla/4.0 (Windows 2000 5.0) > Java/1.6.0_06" > Myproxy-ip - - [15/Jul/2008:08:55:15 +0200] > "POST/TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%2 > 3MAN%239677 HTTP/1.1" 200 326 "-" "Mozilla/4.0 (Windows 2000 5.0) > Java/1.6.0_06" > > They are done by one GET follow by a POST. > > Here an example of the problem during the operation of sign: > Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "User-Agent: Mozilla/4.0 > (Windows 2000 5.0) Java/1.6.0_06" 302 - "-" "-" > Myproxy-ip - - [15/Jul/2008:08:55:18 +0200] "POST > /TesoWebSign/POSTServlet?ChiaveOrd=2008-07-14+13%3A29%3A12.234%232008%23MAN% > 239673 HTTP/1.1" 200 224 "-" "Mozilla/4.0 (Windows 2000 5.0) Java/1.6.0_06" > > The GET request is malformed by the SQUID; the request instead to have the > GET command have the User-Agent, so we receive the error. > > Can anyone help me to know why this problem happened to my SQUID in a random > way ? Could be a few things. Probably one of the double-CR or unencoded-NULL issues floating around. Try an upgrade to recent squid to see if its one of the many we have already solved. Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7
