authenticate_ttl 3 seconds
authenticate_ip_ttl 3 seconds
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl valid_dst dstdomain .kidaro.com
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
icp_access allow all
http_port 80 vhost vport
https_port 443 cert=c:/ssl/certs/certificate.pem
key=C:/ssl/keys/squidkey.pem
cache_peer images.test.com parent8050 0 originserver default
login=PASS
hierarchy_stoplist cgi-bin ?
maximum_object_size 409600
access_log c:/squid/var/logs/access.log squid
debug_options ALL,9
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp: 144020% 10080
refresh_pattern ^gopher:14400% 1440
refresh_pattern . 0 20% 4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
visible_hostname tomer_Cache
coredump_dir c:/squid/var/cache
Thank you!
-Original Message-
From: Guido Serassio [mailto:[EMAIL PROTECTED]
Sent: Monday, February 04, 2008 22:41 PM
To: Tomer Brand; squid-users@squid-cache.org
Subject: Re: [squid-users] Squid Win32 SSL version
Hi,
At 11:05 04/02/2008, Tomer Brand wrote:
>Hi All,
>
>I am trying to run SQUID as reverse proxy with SSL.
>I downloaded 2.6.STABLE18 with SSL support from
>http://squid-mirror.acmeconsulting.it/download/dl-squid.html
>I copied:
> - ssleay32.dll
> - libeay32.dll
>
>To system32 and created a certificate using OpenSSL.
>
>SQUID process gets terminated when the proxy machine gets HTTPS request
>(Working great for HTTP) with the following message:
>
>OPENSSL_Uplink(100EB010,07): no OPENSSL_Applink
>
>Any idea?
As you can read, the SSL enabled binaries are declared "experimental".
There are two reasons for this:
- The SSL binaries are automatically generated during a release
without the test of the SSL functionality
- I use pre-built Windows OpenSSL libraries, out of my quality control.
Please, do you could send to me the SSL section of your squid.conf ,
so I can do some testing?
Regards
Guido
-
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: [EMAIL PROTECTED]
WWW: http://www.acmeconsulting.it/
