Is there a guide where i can refer on how to set the SSL termination. for you second suggestion, i think already did that and thats why i get the above error where HTTP get forward to the parent but HTTPS is using the direct method.
On Sat, Apr 13, 2013 at 11:26 AM, Mohd Akhbar <[email protected]> wrote: > Hi, > > I build ATS version 3.2.4 & 3.3.1 on my Centos 6.4. Both build is success > and install is ok. But when set as forward proxy, HTTPS access fail. Below > are the log in squid format. Anyway, my setup is using a Squid proxy as > parent. > > 1365822587.735 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT > twitter.com:443/ - DIRECT/twitter.com - - > 1365822587.735 30978 10.8.27.242 ERR_CONNECT_FAIL/502 494 CONNECT > twitter.com:443/ - DIRECT/twitter.com text/html - > 1365822591.763 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT > www.facebook.com:443/ - DIRECT/www.facebook.com - - > 1365822591.763 30660 10.8.27.242 ERR_CONNECT_FAIL/502 499 CONNECT > www.facebook.com:443/ - DIRECT/www.facebook.com text/html - > 1365822597.756 0 10.8.27.242 ERR_CONNECT_FAIL/502 0 CONNECT > mail.google.com:443/ - DIRECT/mail.google.com - - > 1365822597.757 31008 10.8.27.242 ERR_CONNECT_FAIL/502 498 CONNECT > mail.google.com:443/ - DIRECT/mail.google.com text/html - > > 1365822690.576 746 10.8.27.242 TCP_MISS/200 7503 GET > http://images.anandtech.com/galleries/2711/HTCOne-7375_thumb.jpg - > PARENT_HIT/x.x.x.x image/jpeg - > 1365822690.577 753 10.8.27.242 TCP_MISS/200 8760 GET > http://images.anandtech.com/galleries/2711/HTCOne-7370_thumb.jpg - > PARENT_HIT/x.x.x.x image/jpeg - > 1365822690.579 748 10.8.27.242 TCP_MISS/200 7837 GET > http://images.anandtech.com/galleries/2711/HTCOne-7391_thumb.jpg - > PARENT_HIT/x.x.x.x image/jpeg - > > Thats why it says 'PARENT_HIT' but when my URL is using port 443, it seems > that it bypass the parent whereas my parent.config only have this: (i chg > the ip to x.x.x.x) > dest_domain=. parent="x1.x1.x1.x1:8080; x2.x2.x2.x2:8080" > round_robin=strict > > I did disable the firewall 'service iptables stop' and already disable the > SELINUX. Pls advise me what else can i try. > > Thank you. > >
