[squid-users] Re: i need help with regex and SSL encapsulation in the squid

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 27 Jun 2003 00:03:37 +0200

Squid never sees the URL on SSL encrypted requests. All Squid sees is a
request to establish a SSL connection to hin-sweb.who.int:443

CONNECT hin-sweb.who.int:443 HTTP/1.0

This asks Squid to give the browser a full duplex connection to the
requested web server to tunnel a encrypted SSL connection. Ontop of this
encrypted SSL connection is then the https:// request sent by the
browser.

Regards
Henrik

tor 2003-06-26 klockan 22.07 skrev Roger Peņa Escobio:
> hello
>
> i use to be suscribed to the squid-user list where i learn that you are a great squid
> hacker that enjoy helping people with problems, a lots of time you help me, but that was
> few years ago, now i'm out of the squid-user list :-( but with an squid problem :-(
>
> i'm trying to aply an acl of the regex type to an SSL connection but can't make work
>
> this is the problem:
>
> i have this URL:
> https://hin-sweb.who.int/?place_to_go=https://hin-sweb.who.int/http://www.healthinternetwork.org/scipub.php
>
> as you can see, the site hin-sweb.who.int is a proxy/redirector, the intention is to offer
> access to the most important health journal and databases to poor countries, but, at the
> same time the site not only limit to that healt jounals and DB, it also give access to all
> the Internet.
> Well, this is where we have the problem, we are a big network that give access to the
> health information resources but just health so we can't just put the hin-sweb.who.int
> domain in our squid proxy because our littel resources will be use for other thing rather
> than health
>
> i use a lot of combinations but it looks like urlpath_regex and url_regex did not work
> with SSL, all the examples i found in the internet, and in the squid site was about plain
> HTTP, so the big question is: do you have some example that i can use ? or can you give me
> some hint to learn how to work with SSL and regex ?
>
> thanks in advance
>
> roger
> ----------------------------------------------------------------------
> Nodo central de la red Infomed (http://www.sld.cu)
> Usuario linux: 97152 (http://counter.li.org)
> Miembro del grupo de coordinacion de LinuxCuba (http://www.linux.cu)
> ----------------------------------------------------------------------
>
>
> -------------------------------------------------
> Este mensaje fue enviado usando el servicio de correo en web de Infomed
> http://webmail.sld.cu

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Thu Jun 26 2003 - 16:03:45 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:39 MST