<html class="apple-mail-supports-explicit-dark-mode"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">I wanted to share my findings I had some help a while back with working on this. </p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;"><br></p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">Resolution:<br style="box-sizing: border-box;">Bug <a class="issue tracker-1 status-1 priority-4 priority-default created-by-me" title="Bug: cache_object://URL Scheme is removed in Squid-6 (New)" href="https://redmine.pfsense.org/issues/15410" style="box-sizing: border-box; color: rgb(17, 102, 153); text-decoration: none; overflow-wrap: break-word;">#15410</a> - cache_object:// scheme removed in Squid 6. <br style="box-sizing: border-box;">squidclient sends Proxy-Authorization header which Squid 6 rejects <br style="box-sizing: border-box;">for squid-internal-mgr endpoint.</p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">Fix: Modified /usr/local/www/status_squid.php to use curl instead <br style="box-sizing: border-box;">of squidclient, sending Authorization header directly:</p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">exec("/usr/local/bin/curl -s --max-time 10 -u 'admin:PASSWORD' <br style="box-sizing: border-box;"><a class="external" href="http://<interface_ip>:3128/squid-internal-mgr/info" style="box-sizing: border-box; color: rgb(17, 102, 153); text-decoration: none; overflow-wrap: break-word; background-position: 0% 60%; background-repeat: no-repeat; padding-left: 12px; background-image: url("../images/external.png");">http://<interface_ip>:3128/squid-internal-mgr/info</a>", $result);</p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">Note: cachemgr_passwd is configured in squid.conf but under normal <br style="box-sizing: border-box;">circumstances manager access is controlled by manager_hosts ACL <br style="box-sizing: border-box;">(src 127.0.0.1 ::1 192.168.1.1). Password is only required because <br style="box-sizing: border-box;">curl/squidclient must authenticate — direct browser access from <br style="box-sizing: border-box;">allowed IPs would prompt via WWW-Authenticate challenge.</p><p style="box-sizing: border-box; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Verdana, sans-serif; font-size: 14px; -webkit-text-size-adjust: 100%;">Upstream bug: pfSense bugtracker <a class="issue tracker-1 status-1 priority-4 priority-default created-by-me" title="Bug: cache_object://URL Scheme is removed in Squid-6 (New)" href="https://redmine.pfsense.org/issues/15410" style="box-sizing: border-box; color: rgb(17, 102, 153); text-decoration: none; overflow-wrap: break-word;">#15410</a></p><div dir="ltr">Sent from my iPhone</div></body></html>