Hello,
I am running Squid 2.7.STABLE8 on Windows XP. I am primarily doing
this for convenience for myself, since I often change from the
locked-down work environment to home, and having to change the proxy
config every time is a bother.
The idea is that Squid is configured to be the proxy in all the places
where this is needed, and then it will contact the parent at work, or
the internet at home.
This all works great. I have even managed to allow my iPad to access
the internet while at work, which is great because the iPad can't
authenticate with the proxy at work.
It all falls down with HTTPS however.
I honestly can't remember if this has ever worked, (I seem to think it
did) but now I am completely stumped.
I have checked the windows firewall, and it is off.
I have downloaded the SSL package from acme, and there is no
difference in the behaviour.
The SSL connections from the browser timeout. Chome reports "Waiting
for proxy tunnel" in the status bar, and then fails with this error:
Error 111 (net::ERR_TUNNEL_CONNECTION_FAILED): Unknown error.
I've tried to enable SSL debugging, but that seems to result in no
logging at all. This seems to be a bug seperate to my problem.
Here's hoping someone out there can help =)
Regards,
- Jake
squid.conf
========================================================================
http_port 8082
# work settings
acl INTERNAL src 172.28.0.0/255.255.0.0
cache_peer 172.25.x.y parent 8080 0 no-query default proxy-only
login=<user>:<pass> no-digest
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl all src 0.0.0.0/0.0.0.0
acl NAUGHTY_STUFF dstdom_regex -i "c:\squid\etc\domain_blacklist"
acl PollingAPIs dstdom_regex -i "c:\squid\etc\pollingAPIs"
acl BLOCKED dstdom_regex -i "c:\squid\etc\abg_blocked"
http_access deny NAUGHTY_STUFF
http_access allow PollingAPIs
http_access allow manager localhost
http_access deny manager
http_access deny BLOCKED
http_access allow localhost
http_access allow INTERNAL
http_access deny all
#never_direct allow all
icp_access deny all
# debug ACL matching
# debug_options 28,3
# debug SSL
# debug_options 83, 3
# debug URL parsing
# debug_options 23,3
cache_effective_user squid
cache_effective_group wheel
httpd_suppress_version_string on
snmp_access deny all
visible_hostname a_computer
cachemgr_passwd 5432 all
#seconds.ms responsetime clientIP squidReqStat/HTTPStat replySize reqMethod
# reqUrl username squidHeirarchyStatus/serverOrPeerIP mime
logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
# localtime, clientIP, reqURL, squidReqStat/HTTPStat, replySize,
logformat accessFormat %{%d/%b/%Y:%H:%M:%S}tl,%>a, %ru, %Ss/%03Hs, %<st
#access_log stdio:c:/squid/var/logs/localhost.access.log accessFormat localhost
#access_log stdio:c:/squid/var/logs/internal.access.log accessFormat INTERNAL
#access_log stdio:c:/squid/var/logs/pollingAPIs.access.log
accessFormat PollingAPIs
access_log stdio:c:/squid/var/logs/access.log accessFormat
cache_log c:/squid/var/logs/cache.log
cache_store_log none
log_mime_hdrs none
useragent_log none
referer_log none
pid_filename c:/squid/var/logs/squid.pid
strip_query_terms off
cache.log
========================================================================
2010/09/30 10:44:50| Starting Squid Cache version 2.7.STABLE8 for
i686-pc-winnt...
2010/09/30 10:44:50| Running on Windows XP
2010/09/30 10:44:50| Process ID 5072
2010/09/30 10:44:50| With 2048 file descriptors available
2010/09/30 10:44:50| With 512 CRT stdio descriptors available
2010/09/30 10:44:50| Windows sockets initialized
2010/09/30 10:44:50| Using select for the IO loop
2010/09/30 10:44:50| Performing DNS Tests...
2010/09/30 10:44:50| Successful DNS name lookup tests...
2010/09/30 10:44:50| DNS Socket created at 0.0.0.0, port 4787, FD 4
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding DHCP nameserver x.x.x.x from Registry
2010/09/30 10:44:50| Adding domain x.x.x.x from Registry
2010/09/30 10:44:50| User-Agent logging is disabled.
2010/09/30 10:44:50| Referer logging is disabled.
2010/09/30 10:44:50| logfileOpen: opening log stdio:c:/squid/var/logs/access.log
2010/09/30 10:44:50| Unlinkd pipe opened on FD 7
2010/09/30 10:44:50| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2010/09/30 10:44:50| Target number of buckets: 425
2010/09/30 10:44:50| Using 8192 Store buckets
2010/09/30 10:44:50| Max Mem size: 8192 KB
2010/09/30 10:44:50| Max Swap size: 102400 KB
2010/09/30 10:44:50| Local cache digest enabled; rebuild/rewrite every
3600/3600 sec
2010/09/30 10:44:50| Store logging disabled
2010/09/30 10:44:50| Rebuilding storage in c:/squid/var/cache (CLEAN)
2010/09/30 10:44:50| Using Least Load store dir selection
2010/09/30 10:44:50| Current Directory is C:\squid
2010/09/30 10:44:50| Loaded Icons.
2010/09/30 10:44:50| Accepting proxy HTTP connections at 0.0.0.0, port
8082, FD 12.
2010/09/30 10:44:50| Accepting ICP messages at 0.0.0.0, port 3130, FD 13.
2010/09/30 10:44:50| Accepting HTCP messages on port 4827, FD 14.
2010/09/30 10:44:50| Accepting SNMP messages on port 3401, FD 15.
2010/09/30 10:44:50| Configuring 172.25.x.y Parent 172.25.x.y /8080/0
2010/09/30 10:44:50| Ready to serve requests.
2010/09/30 10:44:50| Done reading c:/squid/var/cache swaplog (1106 entries)
2010/09/30 10:44:50| Finished rebuilding storage from disk.
2010/09/30 10:44:50| 1106 Entries scanned
2010/09/30 10:44:50| 0 Invalid entries.
2010/09/30 10:44:50| 0 With invalid flags.
2010/09/30 10:44:50| 1106 Objects loaded.
2010/09/30 10:44:50| 0 Objects expired.
2010/09/30 10:44:50| 0 Objects cancelled.
2010/09/30 10:44:50| 0 Duplicate URLs purged.
2010/09/30 10:44:50| 0 Swapfile clashes avoided.
2010/09/30 10:44:50| Took 0.1 seconds (11766.0 objects/sec).
2010/09/30 10:44:50| Beginning Validation Procedure
2010/09/30 10:44:51| Completed Validation Procedure
2010/09/30 10:44:51| Validated 1106 Entries
2010/09/30 10:44:51| store_swap_size = 23708k
2010/09/30 10:44:51| storeLateRelease: released 0 objects
access.log
========================================================================
30/Sep/2010:10:43:46,127.0.0.1, mail.google.com:443, TCP_MISS/000, 0
30/Sep/2010:10:48:01,127.0.0.1, www.dropbox.com:443, TCP_MISS/504, 0
