Ok, i got the solution i guess. Because 443 is not cacheable i set CONFIG proxy.config.http.uncacheable_requests_bypass_parent INT from 1 to 0 then all 443 request goes to my parent. Any developers want to comment in this ?
Tq On Sun, Apr 14, 2013 at 8:41 AM, Mohd Akhbar <[email protected]> wrote: > Is there a guide where i can refer on how to set the SSL termination. for > you second suggestion, i think already did that and thats why i get the > above error where HTTP get forward to the parent but HTTPS is using the > direct method. > > > On Sat, Apr 13, 2013 at 11:26 AM, Mohd Akhbar <[email protected]> wrote: > >> Hi, >> >> I build ATS version 3.2.4 & 3.3.1 on my Centos 6.4. Both build is success >> and install is ok. But when set as forward proxy, HTTPS access fail. Below >> are the log in squid format. Anyway, my setup is using a Squid proxy as >> parent. >> >> 1365822587.735 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT >> twitter.com:443/ - DIRECT/twitter.com - - >> 1365822587.735 30978 10.8.27.242 ERR_CONNECT_FAIL/502 494 CONNECT >> twitter.com:443/ - DIRECT/twitter.com text/html - >> 1365822591.763 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT >> www.facebook.com:443/ - DIRECT/www.facebook.com - - >> 1365822591.763 30660 10.8.27.242 ERR_CONNECT_FAIL/502 499 CONNECT >> www.facebook.com:443/ - DIRECT/www.facebook.com text/html - >> 1365822597.756 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT >> mail.google.com:443/ - DIRECT/mail.google.com - - >> 1365822597.757 31008 10.8.27.242 ERR_CONNECT_FAIL/502 498 CONNECT >> mail.google.com:443/ - DIRECT/mail.google.com text/html - >> >> 1365822690.576 746 10.8.27.242 TCP_MISS/200 7503 GET >> http://images.anandtech.com/galleries/2711/HTCOne-7375_thumb.jpg - >> PARENT_HIT/x.x.x.x image/jpeg - >> 1365822690.577 753 10.8.27.242 TCP_MISS/200 8760 GET >> http://images.anandtech.com/galleries/2711/HTCOne-7370_thumb.jpg - >> PARENT_HIT/x.x.x.x image/jpeg - >> 1365822690.579 748 10.8.27.242 TCP_MISS/200 7837 GET >> http://images.anandtech.com/galleries/2711/HTCOne-7391_thumb.jpg - >> PARENT_HIT/x.x.x.x image/jpeg - >> >> Thats why it says 'PARENT_HIT' but when my URL is using port 443, it >> seems that it bypass the parent whereas my parent.config only have this: (i >> chg the ip to x.x.x.x) >> dest_domain=. parent="x1.x1.x1.x1:8080; x2.x2.x2.x2:8080" >> round_robin=strict >> >> I did disable the firewall 'service iptables stop' and already disable >> the SELINUX. Pls advise me what else can i try. >> >> Thank you. >> >> >
