guys, tell me why in a transparent squid proxy with support for ssl and when the browser connects via protakol http via proxy by site name all is well squid.conf ... acl steam dstdomain api.steampowered.com http_access allow steam http_access deny all ... acl step1 at_step SslBump1 ssl_bump peek step1 ssl_bump bump all

access.log by http

[Thu Jan 24 05:00:58 2019].678 244 TCP_MISS/404 441 GET http://api.steampowered.com/ - ORIGINAL_DST/ text/html

access.log by https

[Thu Jan 24 05:04:07 2019].967 0 TCP_DENIED/200 0 CONNECT - HIER_NONE/- - [Thu Jan 24 05:04:07 2019].973 0 TCP_DENIED/200 0 CONNECT - HIER_NONE/- - [Thu Jan 24 05:04:07 2019].981 0 TAG_NONE/403 3809 GET https://api.steampowered.com/favicon.ico - HIER_NONE/- text/html

Tell me why connect by http - is ok and I do not need to add ip the address in the squid.conf acl allowed list and everything connects but if i what to connect by https i have en error and i need to add ip adress in the squid.conf

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.