Hendrik Pahl wrote:
Hi all,
On debian etch, squid 2.6.5-6etch1 installed, were having this problem:
Squid proxy is running on 192.168.0.1 for example. Now, we try surfing
the web and accessing a https-enabled website - squid does not deliver
it. This happens with any browser - firefox 3.0.3 and IE7 have been
tested. FIrefox shows a message which says
"/ssl_error_rx_record_too_long" - this is a general ssl error in
firefox which means the webserver you are trying to access is using a
flawed ssl implementation (see
http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html)
Since both tested browsers do not show any https-enabled websites, we
tried accessing those sites without the proxy - this works fine.
We couldn't figure where the error happens, but i must be squid i
suppose. The config looks fine i believe. Since i am not that squid
expert, tell me if i can provide some more information to solve this
problem and to figure out what happens here.
Please try a newer Squid release. It may be a fixed bug.
The much-improved package from Lenny should install and run on Etch.
If it still occurs we have a better chance to track it down in the
current code.
Amos
--
Please use Squid 2.7.STABLE4 or 3.0.STABLE9
