Menu

#113 Unable to uncompress deflate encoded data

0.5.x
open
nobody
None
1
2019-01-11
2019-01-11
sles
No

Hello!

Trying to use c-icap 0.5.5 with squid 4.5 and ssl-bump.
Most of sites works ok, but there is problem with google.com, youtube.com, etc,

Fri Jan 11 08:38:20 2019, 10072/3608344320, Unable to uncompress deflate encoded data: uncompress: Uncompression Failure! Handle object as infected

Always reproducable.

Thanky you!

Discussion

  • sles

    sles - 2019-01-11

    btw, default list of supported encodings in firefox is

    network.http.accept-encoding.secure gzip,deflate,br

    if I remove br then everything works.

    Looks like c-icap does not recognize brotli compression, although looks like there is support for it in source code, may be I it is not compiled-in in my case, I return here several minutes later :-)

    Thank you!

     
  • sles

    sles - 2019-01-11

    Yes, I had no development package installed, so I had no br support.
    I guess that it will be good to fix error message, it is misleading.
    Thank you!

     
  • chtsanti

    chtsanti - 2019-01-11

    You can set the virus_scan.PassOnError to on to workaround such cases.
    Also you can remove the br from Accept-Encoding header exist in Http requests. This is can be done in squid, or using other icap module.

    In any case c-icap behaviour is not absolutely correct. It is a question how the brtli encoded files should handled.
    It can not be passed as is to antivirus because brotli files do not have headers and antivirus will not handle it correctly.
    And you can not just ignore these files.

     
  • Anonymous

    Anonymous - 2019-01-11

    Thank you!

    It is good idea to remove br from supported encodings in squid...

     

Anonymous
Anonymous

Add attachments
Cancel





MongoDB Logo MongoDB