U gudbi codsiyada HTTP la doortay ee Squid una leh HTTPS
Soo celi leexasho macmiil ah oo loogu talagalay goobaha la yaqaan ee HTTPS awood u leh, halkii aad si aamusan u beddeli lahayd HTTP origin URL kasta ama ka fikiri lahayd in proxy-ga uu abuuri karo taageero TLS meesha asalka ah.
Squid waxa uu waydiin karaa browser-ka in uu dib u tijaabiyo HTTP URL la doortay isagoo isticmaalaya HTTPS. Meesha loo socdo waa in ay mar hore soo bandhigto kheyraadka ku habboon iyada oo HTTPS ah; ku shaqaynta Squid ee Raspberry Pi ma abuurto awoodaas bogga.
Xiriirka url_rewrite_program ee Squid 7, helper waxa uu soo celin karaa leexasho macmiil ah sida tan:
OK status=307 url="https://www.example.com/help"Kani waa hal jawaab helper oo tusaale ah oo loogu talagalay codsi u dhigma, ma aha barnaamij helper buuxa. Browser-ku waxa uu helaa leexashada oo uu sameeyaa codsi cusub oo HTTPS URL ah. URL ka baxsan siyaasadda kor u qaadista waxa uu heli karaa OK oo uu iska ahaan karaa mid aan isbeddelin.
Isticmaal liis la yaqaan oo ah meelo HTTPS awood u leh oo falanqee URL-ka soo galaya. Ilaali jidka iyo query-ga loogu talagalay, tixgeli port-yada cad, oo si feejigan u maaree hababka codsiga. Beddelka dhammaan prefix-yada http si indho la'aan ah waxa uu u malaynayaa in asal kastaa uu leeyahay adeeg HTTPS u dhigma.
Helper-ku waa in uu ka jawaabaa kasta oo sadar input ah isagoo raacaya borotokoolka nooca Squid ee la rakibay. Haddii kanaallada helper ee isku mar ah ay shidan yihiin, ilaali aqoonsiga kanaalka jawaabta dhexdeeda. Tusaalaha hore ee 301:URL oo qaawan lama beddeli karo qaabka result-and-key/value ee hadda.
Dooro leexasho macmiil ah marka browser-ku tahay in uu ogaado URL-ka cusub. Jawaabta rewrite-url waxay beddelkeeda ka codsanaysaa Squid in uu keeno URL kale oo ka dambeeya codsiga asalka ah ee macmiilka, taas oo laga yaabo in ay ka dhigto URL-yada barnaamijka iyo xaaladdiisa kuwo aan is waafaqsanayn.
Codsiga HTTP ee bilowga ah waxa uu mar hore u socday Squid ka hor inta uusan helper-ku leexin karin. Siyaasaddan dib looma ilaalin karo codsigaas. TLS waxa uu ka bilaabmaa xiriirka HTTPS ee xiga; tunnel CONNECT oo keliya ma bixiyo wax sireed ah.