View squidguard (sgerror.php) error page on SSL sites.

moisesdfelix · Apr 9, 2019, 1:09 PM

I'm having trouble displaying the squidguard error page (sgerror.php) on sites with SSL (ex: https://facebook.com). Use pfSense 3.4 (ngixn) proxy with wpad.

KOM · Apr 9, 2019, 1:28 PM

You're having the same "trouble" everyone else is. That's what happens for blocked HTTPS sites.

stephenw10 · Apr 9, 2019, 5:01 PM

Yes, that's how SSL works. Unless you're doing full MITM ssl interception with CA's on every client the error page will always show an error because it's certificate does not match the target site.

Steve

moisesdfelix · Apr 9, 2019, 5:10 PM

@stephenw10 said in View squidguard (sgerror.php) error page on SSL sites.:

Yes, that's how SSL works. Unless you're doing full MITM ssl interception with CA's on every client the error page will always show an error because it's certificate does not match the target site.
Steve

got it. so in this case, it will only be possible to even display sgerror.php on http sites

stephenw10 · Apr 9, 2019, 8:55 PM

Yes, if you are using one of the other modes Squid can be in.

See: https://www.youtube.com/watch?v=xm_wEezrWf4&feature=youtu.be&t=935

Steve