Squid doesn't proxy https traffic, just http

[krsengr]

So, I'm trying to setup Squid as a proxy for http and https. It's driving me nuts, because this is a vanilla config. I think it's probably something simple, but I'm at a loss as to what the problem is.
CONFIG

• Defaults on most settings for squid
• Transparent proxy NOT enabled (proxy is configured with both ports in browsers)
• ACL for source network set
• Root CA setup on firewall and cert loaded into client.
• local cache disabled (for now)
• A/V and authentication disabled
• Squidguard not loaded (yet)

SYMPTOMS

• Http traffic seems to proxy OK (neverssl.com and others)
• HTTPS traffic just hits the firewall with no response. Tons of syn packets.
• Client just eventually times out, no other errors.
• No denials in the firewall logs (Same rule allows 3128 & 3129 ports)
• There is NO record of httpS traffic in '/var/squid/logs/access.log', only the http stuff

I'm baffled. It's like the checkbox that enables SSL filtering isn't even checked (I've unchecked, and checked and rebooted twice).

Any thoughts?

[krsengr]

@krsengr

Answering my own question to possibly save others some sanity. The system doesn't use a separate port (3129) for the SSL traffic. I saw "SSL Proxy Port" and "Default: 3129" and assumed that's what I should configure on the client...silly me.

I removed the seperate entry for https on my browser and used 3128 for both and everything started working.