Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It seems that squid only "sees" the domain name for https requests.

Is there any way to configure it so that the full url can be logged and/or matched within ACLs?

Thanks.

share|improve this question

migrated from superuser.com May 17 '11 at 16:43

This question came from our site for computer enthusiasts and power users.

No, there is no way. It is within the encrypted channel. There are other tools that permit you to perform a man-in-the-middle attack, which make this possible. They are tricky to setup since they require you to setup a CA, and install a certificate on every client machine.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.