Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

It seems that squid only "sees" the domain name for https requests.

Is there any way to configure it so that the full url can be logged and/or matched within ACLs?

Thanks.

share|improve this question
add comment

migrated from superuser.com May 17 '11 at 16:43

This question came from our site for computer enthusiasts and power users.

1 Answer

No, there is no way. It is within the encrypted channel. There are other tools that permit you to perform a man-in-the-middle attack, which make this possible. They are tricky to setup since they require you to setup a CA, and install a certificate on every client machine.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.