Search squid archive

Re: https site denial only loads a part of the defined error message

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Truth Seeker wrote:
Amos,

In firefox, the complete ERROR message is displaying for both http and https. But for IE, http is showing the full error message, but https is just showing the headings of the error messages.

Is there any work around for this???

You will have to ask the browser developers about that. Squid is already sending all the info it can to get the error displayed in full.

Amos




--- On Wed, 3/25/09, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:

From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
Subject: Re:  https site denial only loads a part of the      defined error message
To: "Truth Seeker" <truth_seeker_3535@xxxxxxxxx>
Cc: "Squid maillist" <squid-users@xxxxxxxxxxxxxxx>
Date: Wednesday, March 25, 2009, 10:26 PM

For certain groups, we are giving access to public
mail servers like
gmail/yahoo etc based on time only. When they are
trying to access any
http mail site, they are getting the complete error
message which i
defined, but when they are accessing any https:// mail
site, they are
getting the same ERROR page BUT ONLY the headings of
the error message.
the complete contents is not displayed.

The following is the acl

### Personal mail Access Policies (Yahoo/Gmail etc)
acl mail_sites dstdomain
"/etc/squid/include-files/mail_sites.squid"
http_access allow mail_sites vip_acl
http_access allow mail_sites power_acl
http_access allow mail_sites thursday_off_time
download_surfers_acl
http_access allow mail_sites off_time_1
download_surfers_acl
http_access allow mail_sites thursday_off_time
surfers_acl
http_access allow mail_sites off_time_1 surfers_acl
http_access deny mail_sites
deny_info ERR_MAIL_SITES mail_sites


WHy it is happening So???

Because HTTPS is not plain old HTTP.

When you send HTTP back in response to a HTTPS tunnel open
request
browsers start to display their weirdness.

You will find some browsers display the error, some do not.
Some will
display the raw HTML that came back but ignore any included
images/CSS
etc.

This is the first I've heard of partial displays, but its
not entirely
surprising.


Amos






--
Please be using
  Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
  Current Beta Squid 3.1.0.6

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux