Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-17 Thread Emmanuel E
No FF will not communicate to a proxy using SSL. It will communicate using SSL to any webserver via proxy or directly, but not to a proxy using SSL. Its not forbidden, but its not explicitly defined anywhere. Similar to bug http://issues.apache.org/bugzilla/show_bug.cgi?id=29744 Till Necko com

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-17 Thread Neil A. Hillard
Hi, Nick Kew wrote: On Thu, 17 Apr 2008 15:28:19 +0100 Roy Pearce <[EMAIL PROTECTED]> wrote: Sounds to me like a browser misconfiguration. All I changed was the port number to point to a secure authenticating proxy server. It appears that FF assumes the proxy server is talking HTTP when

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-17 Thread Nick Kew
On Thu, 17 Apr 2008 15:28:19 +0100 Roy Pearce <[EMAIL PROTECTED]> wrote: > > Sounds to me like a browser misconfiguration. > > > > All I changed was the port number to point to a secure authenticating > proxy server. > > It appears that FF assumes the proxy server is talking HTTP when I > wo

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-17 Thread Roy Pearce
Hi Nick, Thanks for your comments. Nick Kew wrote: On Tue, 15 Apr 2008 15:19:01 +0100 Roy Pearce <[EMAIL PROTECTED]> wrote: The browser appears not to like talking to an SSL-enabled proxy server. Sounds to me like a browser misconfiguration. All I changed was the port number

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-17 Thread Emmanuel E
Try using NTLM which provides some level of security or else try digest authentication using mod_auth_digest Roy Pearce wrote: Hi Nils, Thanks for your reply. Our proxy server is a forward proxy server, not a reverse one so I haven't used the ProxyPass and ProxyPassReverse directives. I re

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-15 Thread Nick Kew
On Tue, 15 Apr 2008 15:19:01 +0100 Roy Pearce <[EMAIL PROTECTED]> wrote: > The browser appears not to like talking to > an SSL-enabled proxy server. Sounds to me like a browser misconfiguration. > Are there other ways to transmit the credentials in an encrypted > manner rather than in plain t

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-15 Thread Roy Pearce
Hi Nils, Thanks for your reply. Our proxy server is a forward proxy server, not a reverse one so I haven't used the ProxyPass and ProxyPassReverse directives. I replicated the (forward) proxy server, added SSL and changed the port to 443. The browser was configured to use this authenticating

Re: [EMAIL PROTECTED] Authenticating Proxy Server

2008-04-15 Thread Nils Jeppe
On 15.04.2008, at 13:22, Roy Pearce wrote: I have tried using an ssl-enabled authenticating proxy server but this confuses the browser as it attempts to talk http to an https server. Mh, why is this? I don't have experience with mod_auth_radius, but I'd expect it to work similarily to al

[EMAIL PROTECTED] Authenticating Proxy Server

2008-04-15 Thread Roy Pearce
Hi, We use Apache as an authenticating proxy server to allow off-site students to access IP-restricted ejournal sites. They provide their university credentials which are validated by a RADIUS server. (We have mod_auth_radius + Apache 2.0.63.) Callers configure their Web browsers to use a Pro