Kungani iziphequluli zingafihla ikhasi lokuvinjwa le-HTTPS le-Squid
Qonda ukuthi kungani isiphequluli singabonisa iphutha lalo lomhubhe esikhundleni se-HTML yangokwezifiso ebuyiselwa ngesicelo se-CONNECT esenqatshiwe.
Ikhasi lokuvinjwa elingokwezifiso le-proxy livela kusayithi le-HTTP. Kusayithi le-HTTPS, isiphequluli sibonisa iphutha lomhubhe esikhundleni salokho. Ukushintsha isifanekiso se-HTML futhi kungase kungashintshi lutho.
Nge-proxy ye-HTTP ecacile, ukuvakasha kwe-HTTPS ngokuvamile kuqala nge-CONNECT. Isiphequluli sicela i-proxy ukuthi ivule umhubhe oya kusibungu kanye nechweba. Uma i-Squid yenqaba leso sicelo, isikhathi se-TLS sesayithi asisoze siqale.
Ukwenqatshwa kungaba nesimo se-HTTP nokuqukethwe kwempendulo. Ungakwazi ukuhlola leyo mpendulo ye-CONNECT ehlulekile nge-curl ngaphandle kwekhasi lephutha lesiphequluli. Lokho akudingi ukuthi isiphequluli sethule i-HTML enikeziwe njengekhasi lewebhu lendawo eya kuyo. Isiphequluli singalahla umzimba wephutha le-CONNECT futhi sisebenzise isixhumi esibonakalayo salo sephutha le-proxy; ukwethulwa okuqondile kuncike kuklayenti.
Uma ukwenqatshwa kwe-Squid sekuvele kuqukethe umzimba we-deny_info ohlosiwe, ukuhlela umbhalo wawo, ishidi lesitayela noma izimvume zefayela akushintshi ukuthi isiphequluli sisingatha isiphi isigaba sempendulo. Gcina isimo sokwenqatshwa kanye nelogi yokufinyelela itholakala ukuze uthole ukuthi i-CONNECT yenqatshiwe yini nokuthi kungani. Ikhasi lesiphequluli elijwayelekile lingafihla imininingwane yenqubomgomo kanti i-proxy isebenzisa umthetho ngendlela efanele.
Ukuhlinzeka ngekhasi lokuvinjwa ngaphakathi koxhumano lwe-HTTPS olubanjisiwe kungenye indlela yokwakha, ehilela ukuqedwa kwe-TLS, ukuthembela kweklayenti nokuphathwa kwezitifiketi. Akunikwe amandla ngokuhlela i-deny_info, futhi isifanekiso esingokwezifiso asinikezi igunya lokulingisa isayithi elivinjwe. Khetha leso sakhiwo kuphela uma kudingeka; uma kungenjalo sebenzisa ukubika amaphutha okutholakala kuklayenti kanye namalogi okusebenza e-proxy.