Yes, I have setup https reverse mode.
The following is my squid.conf file. Please help me to see if any
problem in it. If I type http://localhost in the browser address line,
it works. If I type https://localhost, it asked my to confirm the
certificate, then a invalid request error page.

http_port 127.0.0.1:80 vhost vport
cache_peer zyzg.org.ru parent 80 0 originserver
https_port 443 cert=/usr/squid/etc/cert.pem key=/usr/squid/etc/key.pem
cache_peer breakevilaxis.org parent 80  0 originserver
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
access_log c:/squid/var/logs/access.log squid
debug_options ALL,9
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          
acl Safe_ports port 21          
acl Safe_ports port 443 563     
acl Safe_ports port 70          
acl Safe_ports port 210         
acl Safe_ports port 1025-65535  
acl Safe_ports port 280         
acl Safe_ports port 488         
acl Safe_ports port 591         
acl Safe_ports port 777         
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
http_reply_access allow all
icp_access allow all
visible_hostname ddint.org
coredump_dir c:/squid/var/cache






On 8/28/06, Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
On Mon, 2006-08-28 at 08:07 -0400, fulan Peng wrote:
> Hi,
> I have compiled Squid2.6PRE3 in Cygwin on Windows XP SP2. The http is
> ok but there is a "invalid request" error for the https accelorator
> mode.

Have you set your https_port proper for accelerator/reverse proxy
operation? Minimum defaultsite= should be specified (in addition to
certificates etc..)

Regards
Henrik


Reply via email to