Hi, Forgive me if this is a FAQ, but I've trawled the archives and can't find a solution that fits.
I have Squid 2.5 Stable5 on a Fedora2 platform. I need to be able to authenticate a user when they try to access a specific https address. I have been using ncsa_auth and it works fine if I go to a site that uses http:// Unfortunately, if I try to go to any https site, the challenge response seems to work ok, but I get a 400 Invalid URL message because something seems to have stripped the host name from the URL. If I refresh the screen or click on the "URL:" link, the page is then correctly displayed. I am using IE6 on XPP SP1 and have tried turning the assorted HTTP 1.1 flags on and off to no avail. This is an example URL:- https://www.paypal.com/cgi-bin/webscr?cmd=_registration-run This is the error screen:- <<<<<<<-cut->>>>>>> ERROR The requested URL could not be retrieved --------------------------------------------------------------------------- While trying to retrieve the URL: /cgi-bin/webscr?cmd=_registration-run The following error was encountered: Invalid URL Some aspect of the requested URL is incorrect. Possible problems: Missing or incorrect access protocol (should be `http://'' or similar) Missing hostname Illegal double-escape in the URL-Path Illegal character in hostname; underscores are not allowed Your cache administrator is root. --------------------------------------------------------------------------- Generated Fri, 17 Sep 2004 17:12:55 GMT by jfc.trml.co.uk (squid/2.5.STABLE5) <<<<<<<-cut->>>>>>> Here is the matching bit from the access.log :- <<<<<<<-cut->>>>>>> 1095441174.444 0 192.168.0.11 TCP_DENIED/407 1676 CONNECT www.paypal.com:443 - NONE/- text/html 1095441175.555 112 192.168.0.11 TCP_DENIED/400 1493 GET /cgi-bin/webscr?cmd=_registration-run - NONE/- text/html <<<<<<<-cut->>>>>>> I've tried lots of different https sites and the result is always the same. Suggestions please! regards Martyn Bright
