Nick, Try creating a seperate dstdomain acl for the ssl.insiderserver.com and allow that for your cache_peer_access for the ssl connection
- Justin On Wed, Mar 5, 2008 at 11:35 AM, Nick Duda <[EMAIL PROTECTED]> wrote: > Still not working properly. Here is what my configuration looks like, > followed by what it is doing: > > http_port 80 defaultsite=www.insideserver.com vhost > https_port 443 cert=/path/to/cert/example.crt > key=/path/to/key/example.key defaultsite=ssl.insideserver.com vhost > # > acl example_sites dstdomain www.insideserver.com ssl.insiderserver.com > acl example_ssl proto HTTPS > # > cache_peer 192.168.0.10 parent 443 0 no-query originserver ssl > name=example_ssl > cache_peer_access example_ssl allow example_sites example_ssl > # > cache_peer 192.168.0.10 parent 1080 0 no-query originserver > name=example_http > cache_peer_access example_http allow example_sites > > > I setup an entry in my host file: > 68.x.x.x. www.insiderserver.com > > I open IE and browse to www.insiderserver.com and it works, no problem > I browse to ssl.inisdeserver.com which is the same server as > www.insideserver.com but requires SSL to connect and IE just > spins....thinking over and over. I look at the access.log on the proxy > and over and over it keeps trying to make a connection, but its saying > example_http even though im trying for the SSL version > > TCP_MISS/302 574 GET https://ssl.insideserver.com - > FIRST_UP_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > ANY_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > FIRST_UP_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > ANY_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > FIRST_UP_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > ANY_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > FIRST_UP_PARENT/example_http text/html > TCP_MISS/302 574 GET https://ssl.insideserver.com - > ANY_PARENT/example_http text/html > > > > > -----Original Message----- > From: Anthony Tonns [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 05, 2008 10:44 AM > To: squid-users@squid-cache.org > Subject: RE: [squid-users] Configuring reverse proxy for both 80/443 > > You want something like this: > > http_port 80 defaultsite=www.example.com vhost > https_port 443 cert=example.crt key=example.key > defaultsite=www.example.com vhost > # > acl example_sites dstdomain www.example.com example.com > acl example_ssl proto HTTPS > # > cache_peer 127.0.0.1 parent 1443 0 no-query originserver ssl > name=example_ssl > cache_peer_access example_ssl allow example_sites example_ssl > # > cache_peer 127.0.0.1 parent 1080 0 no-query originserver > name=example_http > cache_peer_access example_http allow example_sites > > > -----Original Message----- > > From: Nick Duda [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, March 04, 2008 5:11 PM > > To: squid-users@squid-cache.org > > Subject: [squid-users] Configuring reverse proxy for both 80/443 > > > > I seem to be stumped. I need to reverse proxy for one internal server > > that listens on both 80 and 443. How can I configure squid to proxy > for > > the same cache-peer on both 80 and 443? As far as I can see you can > only > > specify one protocol per cache-peer line. I think I am missing > > something. > > > > - Nick > -- - Justin Lintz