Unable to uncompress deflate encoded data
Status: Beta
Brought to you by:
chtsanti
Hello!
Trying to use c-icap 0.5.5 with squid 4.5 and ssl-bump.
Most of sites works ok, but there is problem with google.com, youtube.com, etc,
Fri Jan 11 08:38:20 2019, 10072/3608344320, Unable to uncompress deflate encoded data: uncompress: Uncompression Failure! Handle object as infected
Always reproducable.
Thanky you!
Anonymous
btw, default list of supported encodings in firefox is
network.http.accept-encoding.secure gzip,deflate,br
if I remove br then everything works.
Looks like c-icap does not recognize brotli compression, although looks like there is support for it in source code, may be I it is not compiled-in in my case, I return here several minutes later :-)
Thank you!
Yes, I had no development package installed, so I had no br support.
I guess that it will be good to fix error message, it is misleading.
Thank you!
You can set the virus_scan.PassOnError to on to workaround such cases.
Also you can remove the br from Accept-Encoding header exist in Http requests. This is can be done in squid, or using other icap module.
In any case c-icap behaviour is not absolutely correct. It is a question how the brtli encoded files should handled.
It can not be passed as is to antivirus because brotli files do not have headers and antivirus will not handle it correctly.
And you can not just ignore these files.
Thank you!
It is good idea to remove br from supported encodings in squid...