Bug#929224: apt-cacher-ng, debootstrap and deb.debian.org combination fails
* Sean Whitton [Sun, May 19 2019, 08:08:07AM]:
> I thought that the problem is that apt-cacher-ng is not able to resolve
> SRV records. However, I'm not so sure about that now. debootstrap uses
> wget to download stuff, so I tried this:
> root@iris:/srv/chroot>http_proxy=http://localhost:3142 wget http://deb.debian.org/debian/dists/sid/Release
> URL transformed to HTTPS due to an HSTS policy
> --2019-05-19 07:54:37-- https://deb.debian.org/debian/dists/sid/Release
> Resolving localhost (localhost)... ::1, 127.0.0.1
> Connecting to localhost (localhost)|::1|:3142... connected.
> Proxy tunneling failed: CONNECT denied (ask the admin to allow HTTPS tunnels)Unable to establish SSL connection.
Uhm, I suggest you do what it says and read the manual?
The "laissez-faire method": in acng.conf (or related) configure the PassThroughPattern option to contain a regex like .* and configure the clients to use apt-cacher-ng as HTTP proxy and let the clients connect to https URLs "as usual". Some limited access control can be achieved through adjustment of the regular expression (.* permits access to any host and any port, including 443 for https). Data is not cached on the server.
Also modified by debconf: dpkg-reconfigure -plow apt-cacher-ng