Enhancement #3106

Web proxy: add prop for squid SSL_ports

Added by Filippo Carletti over 6 years ago. Updated over 6 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-squid
Target version:v6.6
Resolution: NEEDINFO:No

Description

SSL_ports contain the list of ports where SSL connections are permitted.
The issue is the same as #3101, but for SSL.

Maybe we could add all custom safe ports to the SSL_ports squid directive.


Related issues

Related to NethServer 6 - Enhancement #3101: Web proxy: add property for Squid safe ports CLOSED

Associated revisions

Revision 8d5d7a16
Added by Giacomo Sanchietti over 6 years ago

squid.conf: add SafePorts to SSL_ports acl. Refs #3106

History

#1 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from NEW to TRIAGED
  • % Done changed from 0 to 20

#2 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Giacomo Sanchietti
  • % Done changed from 20 to 30

#3 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

#4 Updated by Giacomo Sanchietti over 6 years ago

#5 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 60 to 70
Package in nethserver-testing:
  • nethserver-squid-1.3.2-1.4.g8d5d7a1.ns6.noarch.rpm
Test case
  • Try to set new safe ports:
    config setprop squid SafePorts 446,447
    
  • Check the ports are listed inside squid.conf
    grep SSL_ports /etc/squid/squid.conf
    
  • Check squid is running

#6 Updated by Filippo Carletti over 6 years ago

  • Status changed from ON_QA to VERIFIED
  • % Done changed from 70 to 90
[root@ns65 ~]# config getprop squid SafePorts
446
[root@ns65 ~]# grep 446 /etc/squid/squid.conf
acl Safe_ports port 446
acl SSL_ports port 446

From squid/access.log
1427989231.208   2472 192.168.56.x TCP_MISS/200 23091 CONNECT gateway.xxx.com:446 - HIER_DIRECT/x.x.x.71 -

#7 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100

#8 Updated by Giacomo Sanchietti over 6 years ago

Released in nethserver-updates:
  • nethserver-squid-1.3.3-1.ns6.noarch.rpm

Also available in: Atom PDF