[zorp-hu] zorp-os https apt proxyn keresztul

[Kosa Attila]

On Tue, Sep 06, 2005 at 06:07:51PM +0200, Gellér Sándor wrote:
> 
> Nalam mar mukodik(TM), https proxy-n keresztul ket authentikacioval
> (squid proxy + balabit website) egyutt. Most kerult be az uj verzio a

Most mar a zorp is kepbe kerult :) Zorp 2.1.8, Sarge, a gep
eloszor egy squid-on megy keresztul (nincs auth), utana jon a
zorp. A squid logjaban latszik a CONNECT, de a zorp megfogja.
A hibauzenet a kovetkezo (5-os debug levelen):
This request type is not permitted in transparent mode; request_type='proxy'

A konfig a kovetkezo:

class IntraHttps(PsslProxy):
        class EmbeddedHttp(HttpProxy):
                def config(self):
                        HttpProxy.config(self)
                        self.transparent_mode = TRUE

        def config(self):
                self.server_need_ssl = TRUE
                self.server_verify_type = SSL_VERIFY_REQUIRED_TRUSTED
                self.server_ca_directory = '/etc/zorp/ca.crt'
                self.client_need_ssl = TRUE
                self.client_cert = '/etc/zorp/fw.akarmi.hu.crt'
                self.client_key = '/etc/zorp/fw.akarmi.hu.key.nopass'
                self.client_verify_type = SSL_VERIFY_NONE
                self.stack_proxy = self.EmbeddedHttp
                self.server_verify_depth = 2

-- 
		Udvozlettel
				    Zsiga