Actions
Bug #6777
closed
squid cant redirect ssl website correctly to squidguard error page in a denied category
Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Squid
Target version:
-
Start date:
09/07/2016
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
amd64
Description
When you use "squid" with "squidguard" set in "NO" transparent mode, any category denied previously (squidguard) the browser shows an invalid cert for the domain "http", this happens always, if you ignore the warning, squid show an error¶
ERROR¶
The requested URL could not be retrieved
The following error was encountered while trying to retrieve the URL: https://http/*
Unable to determine IP address from host name http
The DNS server returned:
Name Error: The domain name does not exist.
This means that the cache was not able to resolve the hostname presented in the URL. Check if the address is correct.
But never shows the error page from squidguard, I tested many pages with the same result, the certificate issue only appears when the website is denied by a rule from squidguard when you inspect ssl.
I attached screenshots with the tests.
Package version:
pfsense 2.3.2-RELEASE (amd64)
squid 3.5.19_1
squidguard 1.4_15
Files
| e1.png (160 KB) e1.png | in a permitted category, squid shows the certificate correctly | ||
| e3.png (79.4 KB) e3.png | in a https website previously blocked by the squidguard rules, squid insert an invalid certificate for "http" website | ||
| e4.png (50.6 KB) e4.png | squid shows the issue with the certificate and the wrong url | ||
| e2.png (88 KB) e2.png | in a http website squid blocked correctly by the squidguard rules | ||
| e5.png (445 KB) e5.png | if you want to enter to any site that is permitted, the wrong certificate isn't shown |
Updated by 
Updated by 
Updated by 
Actions