Search squid archive

cannot intercept "https://www.elastic.co/"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,
I am running squid-3.3.8 (I also tried with Squid 3.5.0.4) on a centos 6.7 machine with openssl-1.0.1e-30.el6.8.x86_64, I have no problem with most of the ssl sites however when I try to connect to "https://www.elastic.co/" browsers cannot render the whole page (tried on windows 8 with chrome, ubuntu mozzilla) 

I get below error from cache.log:
2016/02/12 17:39:25 kid2| Error negotiating SSL on FD 57: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure (1/-1/0)

And below errors from the browser:
ReferenceError: jQuery is not defined
}(jQuery));
munchkin.js (line 10)
ReferenceError: $ is not defined
$(document).ready(function(){

my squid config is like that:

http_port 0.0.0.0:8080 ssl-bump cert=/var/proxy/https_cert generate-host-certificates=on
http_port 0.0.0.0:18080 intercept ssl-bump cert=/var/proxy/https_cert generate-host-certificates=on
https_port 0.0.0.0:18081 intercept ssl-bump cert=/var/proxy/https_cert generate-host-certificates=on

acl no_ssl_interception dstdom_regex  "/etc/squid/https_exceptions"
ssl_bump none localhost
ssl_bump none no_ssl_interception 
ssl_bump server-first all
acl https_proto proto https
always_direct allow https_proto
sslproxy_cert_error allow all
sslproxy_flags DONT_VERIFY_PEER

what can cause this?
And another problem, I cannot bypass some sites defined in the "/etc/squid/https_exceptions" file from https interception like "https://api.nuget.org/v3/ ", what can cause this?

thanks a lot,
Murat

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux