[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    Re: [squid-users] squid 5.7: can't access https://www.ilo.org/global/lang--en/index.htm with enabled
From:       Alex Rousskov <rousskov () measurement-factory ! com>
Date:       2022-11-14 13:15:31
Message-ID: b12a9576-b79c-05f3-bfe4-5beac670db4b () measurement-factory ! com
[Download RAW message or body]

On 11/14/22 07:12, Dieter Bloms wrote:

> I've increased the debuglevel, but can't find any reason, why squid
> reponds with ERR_INVALID_RESP.


> HTTP/1.1 200 OK
> Server: Oracle-Application-Server-11g
> Transfer-Encoding: chunked
> Via: 1.1 www.ilo.org
> Transfer-Encoding: chunked

The above (abridged) response is malformed because it has two 
Transfer-Encoding headers signalling "chunked, chunked" transfer 
encoding. The proxy and/or the origin server your Squid is talking to is 
broken.

Modern Squids reject such messages because they are known to be used for 
cache poisoning and other security breaches. There is no official 
workaround (yet).


HTH,

Alex.

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
[prev in list] [next in list] [prev in thread] [next in thread]