Qondisa kabusha izicelo ze-HTTP ezikhethiwe ezivela ku-Squid ziye ku-HTTPS
Buyisela ukuqondisa kabusha komthengi kumasayithi aziwayo anamandla e-HTTPS esikhundleni sokushintsha buthule yonke i-HTTP origin URL noma ukucabanga ukuthi i-proxy ingakha ukusekelwa kwe-TLS endaweni yomsuka.
I-Squid ingacela isiphequluli ukuthi sizame kabusha i-HTTP URL ekhethiwe nge-HTTPS. Indawo okuyiwa kuyo kufanele ngabe isivele ihlinzeka ngensiza efanele nge-HTTPS; ukusebenzisa i-Squid ku-Raspberry Pi akukudali lelo khono kuwebhusayithi.
Ngokwe-interface ye-url_rewrite_program ye-Squid 7, i-helper ingabuyisela ukuqondisa kabusha komthengi okufana nalokhu:
OK status=307 url="https://www.example.com/help"
Lokhu kuyisibonelo esisodwa se-helper yokuphendula isicelo esifanayo, hhayi uhlelo oluphelele lwe-helper. Isiphequluli sithola ukuqondisa kabusha futhi senze isicelo esisha ku-HTTPS URL. I-URL engaphandle kwenqubomgomo yokuthuthukisa ingathola i-OK futhi ihlale ingashintshile.
Sebenzisa uhlu olwaziwayo lwezindawo ezinamandla e-HTTPS futhi uhlole i-URL engenayo. Gcina indlela ne-query okuhlosiwe, cabangela izimbobo ezicacile futhi usingathe izindlela zesicelo ngokuqaphela. Ukushintsha ngobumpumputhe zonke iziqalo ze-http kucabanga ukuthi yonke imvelaphi inensiza ye-HTTPS efanayo.
I-helper kufanele iphendule yonke imigqa yokufaka ngokuvumelana neprotocol yenguqulo ye-Squid efakiwe. Uma amashaneli e-helper akhona ngesikhathi esisodwa avuliwe, gcina isihlonzi seshaneli empendulweni. Isibonelo sakudala se-301:URL esinqunu asikwazi ukushintshwa nefomethi yamanje ye-result-and-key/value.
Khetha ukuqondisa kabusha komthengi lapho isiphequluli kufanele sazi i-URL entsha. Impendulo ye-rewrite-url esikhundleni salokho icela i-Squid ukuthi ilethe enye i-URL ngemva kwesicelo sokuqala somthengi, okungase kushiye ama-URL nohlelo lokusebenza kungavumelani.
Isicelo sokuqala se-HTTP sesivele saye ku-Squid ngaphambi kokuba i-helper siqondise kabusha. Le nqubomgomo ayikwazi ukuvikela leso sicelo ngemuva. I-TLS iqala ekuxhumaneni okulandelayo kwe-HTTPS; umhubhe we-CONNECT wodwa awunikezi nokubethelwa.