squid блокирует https

acl SSL_ports port 443
acl Safe_ports port 443

cat /etc/squid/squid.conf|grep -v "#"|grep -v ^$

# NETWORK OPTIONS
# -----------------------------------------------------------------------------
http_port 3128
icp_port 0
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
# OPTIONS WHICH AFFECT THE CACHE SIZE
# -----------------------------------------------------------------------------
cache_mem 16 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 32 KB
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# -----------------------------------------------------------------------------
cache_dir ufs /var/cache/squid 4096 32 128
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
emulate_httpd_log off
log_ip_on_direct on
mime_table /etc/squid/mime.conf
log_mime_hdrs off
pid_filename /var/run/squid.pid
#debug_options ALL,1 33,2 28,9
debug_options ALL,1
log_fqdn off
client_netmask 255.255.255.255
# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# -----------------------------------------------------------------------------
ftp_user squid@servers.baya.com.ua
ftp_list_width 64
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on
dns_retransmit_interval 5 seconds
dns_timeout 1 minutes
hosts_file /etc/hosts
unlinkd_program /usr/libexec/squid/unlinkd
#auth
auth_param ntlm program /usr/libexec/squid/fakeauth_auth
auth_param ntlm children 20
authenticate_ttl 15 hour
authenticate_ip_ttl 15 minutes
#auth_param basic program /usr/libexec/squid/ncsa_auth
# OPTIONS FOR TUNING THE CACHE
# -----------------------------------------------------------------------------
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
negative_ttl 2 minutes
positive_dns_ttl 3 hours
negative_dns_ttl 10 minutes
# TIMEOUTS
# -----------------------------------------------------------------------------
forward_timeout 1 minute
connect_timeout 30 seconds
peer_connect_timeout 30 seconds
read_timeout 5 minutes
request_timeout 2 minutes
persistent_request_timeout 2 minutes
client_lifetime 1 day
half_closed_clients on
pconn_timeout 120 seconds
shutdown_lifetime 30 seconds
# ACCESS CONTROLS
# -----------------------------------------------------------------------------
acl all src 0.0.0.0/0.0.0.0
acl lan src 10.0.0.0/255.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1
acl intranet dst "/etc/squid/acl/intranet"
acl servers src "/etc/squid/acl/servers"
acl auth proxy_auth "/etc/squid/acl/inet"
acl fullaccess proxy_auth "/etc/squid/acl/fullaccess"
acl java browser .*Java.*
acl denyinet src "/etc/squid/acl/denyinet"
#acl worktime time MTWHF 09:00-17:59
#acl worktime time A 09:00-11:59
#acl google url_regex -i google
acl downloads urlpath_regex -i \.mp3$ \.avi$ \.mpeg$ \.mpg$ \.rm$ \.wmv$ \.wav$ \.kar$ \.mid$ \
    \.avi$ \.mov$ \.gz$ \.bz2$ \.exe$ \.com$ \.cmd$ \.reg$
# DIAM ACCESS CONTROLS
acl priv_users proxy_auth "/etc/squid/acl/priv_users"
acl limited_users proxy_auth "/etc/squid/acl/limited_users"
acl unpriv_users proxy_auth "/etc/squid/acl/unpriv_users"
acl losers proxy_auth "/etc/squid/acl/losers"
acl deny_urls url_regex "/etc/squid/acl/deny_urls"
acl deny_downloads url_regex "/etc/squid/acl/deny_downloads"
acl SSL_ports port 443 451
acl Safe_ports port 443 451
#rules
http_access allow manager localhost
http_access deny manager
http_access deny !lan
http_access allow servers
http_access allow intranet
http_access allow java
http_access allow fullaccess auth
#http_access deny !google downloads
http_access deny denyinet
http_access allow auth
#http_access deny all
# DIAM RULES & POOLS
delay_pools 3
delay_class 1 2
delay_class 2 2
delay_class 3 2
delay_parameters 1 200000/200000 30000/30000
delay_parameters 2 20000/20000 10000/10000
delay_parameters 3 5000/5000 5000/5000
http_access allow priv_users
http_access deny priv_users
delay_access 1 allow limited_users
http_access deny limited_users deny_urls
http_access deny limited_users deny_downloads
http_access allow limited_users
delay_access 1 deny all
delay_access 2 allow unpriv_users
http_access deny unpriv_users deny_urls
http_access deny unpriv_users deny_downloads
http_access allow unpriv_users
delay_access 2 deny all
delay_access 3 allow losers
#http_access deny losers deny_urls
http_access deny losers deny_downloads
http_access allow losers
delay_access 3 deny all
http_access deny all
http_reply_access allow all
icp_access deny all
miss_access allow all
ident_lookup_access deny all
# ADMINISTRATIVE PARAMETERS
# -----------------------------------------------------------------------------
cache_mgr squid@servers.baya.com.ua
cache_effective_user squid
cache_effective_group squid
visible_hostname gw
# MISCELLANEOUS
# -----------------------------------------------------------------------------
dns_testnames netscape.com internic.net nlanr.net microsoft.com
logfile_rotate 0
append_domain .baya.loc
memory_pools on
memory_pools_limit 8 MB
forwarded_for on
client_db off
#always_direct allow intranet
always_direct allow all
#never_direct deny intranet
#never_direct allow all
global_internal_static off
error_directory /etc/squid/errors
coredump_dir /var/cache/squid
ie_refresh on
tcp_outgoing_address 192.168.1.2
# cache_peer 10.2.6.62 parent 3128 0 proxy-only weight=10
# cache_peer 10.2.6.245 parent 3128 0 proxy-only weight=1

http_port 3128
icp_port 0
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
cache_mem 16 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 32 KB
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir ufs /var/cache/squid 4096 32 128
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
emulate_httpd_log off
log_ip_on_direct on
mime_table /etc/squid/mime.conf
log_mime_hdrs off
pid_filename /var/run/squid.pid
debug_options ALL,1
log_fqdn off
client_netmask 255.255.255.255
ftp_user squid@servers.baya.com.ua
ftp_list_width 64
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on
dns_retransmit_interval 5 seconds
dns_timeout 1 minutes
hosts_file /etc/hosts
unlinkd_program /usr/libexec/squid/unlinkd
auth_param ntlm program /usr/libexec/squid/fakeauth_auth
auth_param ntlm children 20
authenticate_ttl 15 hour
authenticate_ip_ttl 15 minutes
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
negative_ttl 2 minutes
positive_dns_ttl 3 hours
negative_dns_ttl 10 minutes
forward_timeout 1 minute
connect_timeout 30 seconds
peer_connect_timeout 30 seconds
read_timeout 5 minutes
request_timeout 2 minutes
persistent_request_timeout 2 minutes
client_lifetime 1 day
half_closed_clients on
pconn_timeout 120 seconds
shutdown_lifetime 30 seconds
acl all src 0.0.0.0/0.0.0.0
acl lan src 10.0.0.0/255.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1
acl intranet dst "/etc/squid/acl/intranet"
acl servers src "/etc/squid/acl/servers"
acl auth proxy_auth "/etc/squid/acl/inet"
acl fullaccess proxy_auth "/etc/squid/acl/fullaccess"
acl java browser .*Java.*
acl denyinet src "/etc/squid/acl/denyinet"
acl downloads urlpath_regex -i \.mp3$ \.avi$ \.mpeg$ \.mpg$ \.rm$ \.wmv$ \.wav$ \.kar$ \.mid$ \
    \.avi$ \.mov$ \.gz$ \.bz2$ \.exe$ \.com$ \.cmd$ \.reg$
acl priv_users proxy_auth "/etc/squid/acl/priv_users"
acl limited_users proxy_auth "/etc/squid/acl/limited_users"
acl unpriv_users proxy_auth "/etc/squid/acl/unpriv_users"
acl losers proxy_auth "/etc/squid/acl/losers"
acl deny_urls url_regex "/etc/squid/acl/deny_urls"
acl deny_downloads url_regex "/etc/squid/acl/deny_downloads"
acl SSL_ports port 443 451
acl Safe_ports port 443 451
http_access allow manager localhost
http_access deny manager
http_access deny !lan
http_access allow servers
http_access allow intranet
http_access allow java
http_access allow fullaccess auth
http_access deny denyinet
http_access allow auth
delay_pools 3
delay_class 1 2
delay_class 2 2
delay_class 3 2
delay_parameters 1 200000/200000 30000/30000
delay_parameters 2 20000/20000 10000/10000
delay_parameters 3 5000/5000 5000/5000
http_access allow priv_users
http_access deny priv_users
delay_access 1 allow limited_users
http_access deny limited_users deny_urls
http_access deny limited_users deny_downloads
http_access allow limited_users
delay_access 1 deny all
delay_access 2 allow unpriv_users
http_access deny unpriv_users deny_urls
http_access deny unpriv_users deny_downloads
http_access allow unpriv_users
delay_access 2 deny all
delay_access 3 allow losers
http_access deny losers deny_downloads
http_access allow losers
delay_access 3 deny all
http_access deny all
http_reply_access allow all
icp_access deny all
miss_access allow all
ident_lookup_access deny all
cache_mgr squid@servers.baya.com.ua
cache_effective_user squid
cache_effective_group squid
visible_hostname gw
dns_testnames netscape.com internic.net nlanr.net microsoft.com
logfile_rotate 0
append_domain .baya.loc
memory_pools on
memory_pools_limit 8 MB
forwarded_for on
client_db off
always_direct allow all
global_internal_static off
error_directory /etc/squid/errors
coredump_dir /var/cache/squid
ie_refresh on
tcp_outgoing_address 192.168.1.2