Hi all,
https://www.spinics.net/lists/squid/msg90523.html
As mentioned in the above URL, I would like to use "SSL Bump with HTTP Cache Peer Parent" as well.
However, still seems not be supported like the following.
- FwdState.cc (in squid-4.8 which is currect stable version)
825 FwdState::connectStart()
826 {
827 assert(serverDestinations.size() > 0);
828
829 debugs(17, 3, "fwdConnectStart: " << entry->url());
830
831 request->hier.startPeerClock();
832
833 // Do not fowrward bumped connections to parent proxy unless it is an
834 // origin server
835 if (serverDestinations[0]->getPeer() && !serverDestinations[0]->getPeer()->options.originserver && request->flags.sslBumped) {
836 debugs(50, 4, "fwdConnectStart: Ssl bumped connections through parent proxy are not allowed");
837 ErrorState *anErr = new ErrorState(ERR_CANNOT_FORWARD, Http::scServiceUnavailable, request);
838 fail(anErr);
839 self = NULL; // refcounted
840 return;
841 }
Do you have any plan to support that? or Are there any solutions for that ?
Regards,
--
Mikio Kishi
https://www.spinics.net/lists/squid/msg90523.html
As mentioned in the above URL, I would like to use "SSL Bump with HTTP Cache Peer Parent" as well.
However, still seems not be supported like the following.
- FwdState.cc (in squid-4.8 which is currect stable version)
825 FwdState::connectStart()
826 {
827 assert(serverDestinations.size() > 0);
828
829 debugs(17, 3, "fwdConnectStart: " << entry->url());
830
831 request->hier.startPeerClock();
832
833 // Do not fowrward bumped connections to parent proxy unless it is an
834 // origin server
835 if (serverDestinations[0]->getPeer() && !serverDestinations[0]->getPeer()->options.originserver && request->flags.sslBumped) {
836 debugs(50, 4, "fwdConnectStart: Ssl bumped connections through parent proxy are not allowed");
837 ErrorState *anErr = new ErrorState(ERR_CANNOT_FORWARD, Http::scServiceUnavailable, request);
838 fail(anErr);
839 self = NULL; // refcounted
840 return;
841 }
Do you have any plan to support that? or Are there any solutions for that ?
Regards,
--
Mikio Kishi
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users