HTTP Anti-Virus Proxy http://havp.hege.li/forum/ |
|
HTTPS with bzr - Invalid request from browser http://havp.hege.li/forum/viewtopic.php?f=3&t=393 |
Page 1 of 1 |
Author: | boran [ 10 Oct 2008 11:38 ] |
Post subject: | HTTPS with bzr - Invalid request from browser |
Hi, I have a setup like this: User/browser ==> Havp ==> Squid ==> Internet It is compiled with --enable-ssl-tunnel --with-scanner=libclamav I can access http & https websites just fine. However, on connecting to certains https sides I have problems. I use the brz (baraar source code versioning) to download sources from the internet. When https://user:password@site.example.com/bzr/project/ bzr says: ERROR: Transport error: Server refuses to fullfil the request And Havp says: Invalid request from browser If I disable havp and go directly to squid, there is no problem. Since havp should just tunnel https, has anyone an idea why it would give errors based on the https headers or content? Thanks in advance, |
Author: | hege [ 10 Oct 2008 11:43 ] |
Post subject: | Re: HTTPS with bzr - Invalid request from browser |
It maybe be some strange HTTPS requirement that HAVP doesn't know how to fullfill. My advice is to not use HAVP to tunnel, it has drawbacks and no positives. Point your browser SSL to to Squid or don't proxy it. |
Author: | boran [ 10 Oct 2008 14:18 ] |
Post subject: | Re: HTTPS with bzr - Invalid request from browser |
Hmm. But I need to make that change transparent to my users, and don't have a way to push a proxypac either. Browsers are configured to connected to http://proxy.mydomain.com:80. I could try doing the "squid sandwich" that is mentioned elsewhere in the forum: User > Squid > Havp > Squid > Internet but it does sound alot more complicated to manage.. |
Author: | hege [ 10 Oct 2008 14:23 ] |
Post subject: | Re: HTTPS with bzr - Invalid request from browser |
Well, it might be slightly more complicated, but it allows a lot more flexibility regarding acls, forwarding etc. |
Page 1 of 1 | All times are UTC + 2 hours [ DST ] |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |