[squid-users] hiding web server port

2014-10-31 Thread Joel Mestres
hello everyone! I'm trying to configure squid 2.7 so it works with a web server (another machine different from squid proxy server) running apache2 on port 8082 (for instance). Squid is installed on debian. Now I have squid with http_port 3128 transparent but I don't figure out how can I achive

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 1:39 p.m., Marcus Kool wrote: > > > On 10/31/2014 10:12 PM, Amos Jeffries wrote: On 1/11/2014 12:09 > p.m., Marcus Kool wrote: With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fail

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Marcus Kool
On 10/31/2014 10:12 PM, Amos Jeffries wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 12:09 p.m., Marcus Kool wrote: With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fails (tries TLS1.2) openssl s_client -connect www.taxdisc.service.gov.uk

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 12:09 p.m., Marcus Kool wrote: > With OpenSSL 1.0.1e-fips : > > openssl s_client -connect www.taxdisc.service.gov.uk:443 > fails (tries TLS1.2) openssl s_client -connect > www.taxdisc.service.gov.uk:443 -ssl3 works > > The webmail serv

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Marcus Kool
With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fails (tries TLS1.2) openssl s_client -connect www.taxdisc.service.gov.uk:443 -ssl3 works The webmail server of my ISP works like this: it uses only TLS1.0, so no TLS1.1 or TLS1.2, but when with op

Re: [squid-users] Correctly implementing peak-splice

2014-10-31 Thread James Lay
On Thu, 2014-10-30 at 06:06 -0600, James Lay wrote: > Hello all, > > Here is my complete config for trying out peek/splice. This currently > does not work..is there something obvious that I'm mission? Current > error is: > > Oct 30 06:03:14 gateway squid: 192.168.1.110 - - [30/Oct/2014:06:03:14

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Dieter Bloms
Hi Steve, On Fri, Oct 31, Steve Hill wrote: > This is probably not a problem with Squid, but I'm posting here in the > hope that someone may have more clue than me when it comes to SSL :) ... > If I force openssl into TLS1 mode (with the -tls1 argument) then it > works fine. TLS 1.1 and 1.2 bo

[squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Steve Hill
This is probably not a problem with Squid, but I'm posting here in the hope that someone may have more clue than me when it comes to SSL :) When accessing https://www.taxdisc.service.gov.uk/ through an SSL bumping squid, I get: - The following error was encountered while trying to retrieve t

Re: [squid-users] iOS 8 and ssl_bump: Anyone working?

2014-10-31 Thread inetjunkmail
Thanks for your input. After further testing (which I thought I already tested and determined was not the case...), it looks like it fails any time a certificate is "broken" when using a proxy server even with ssl bumping turned off. If I use a host file to make the cert name not match, I get the

[squid-users] The Solution Of How to run squid with eCAP feature on windows

2014-10-31 Thread DongMing Huang
Some day ago, I made it. Just share. Ready Step 1: Install cygwin. https://cygwin.com/install.html Step 2: Get squid-3.3.3-2 src by cygwin setup-x86.exe or setup-x86_64.exe. They are GUI package manager of cygwin. HDM@HDM-PC /usr/src/squid-3.3.3-2.src $ ls 3.3.3-cygwin.patch squ

[squid-users] The Solution Of How to run squid with eCAP feature on windows

2014-10-31 Thread DongMing Huang
Some day ago, I made it. Just share. Ready Step 1: Install cygwin. https://cygwin.com/install.html Step 2: Get squid-3.3.3-2 src by cygwin setup-x86.exe or setup-x86_64.exe. They are GUI package manager of cygwin. HDM@HDM-PC /usr/src/squid-3.3.3-2.src $ ls 3.3.3-cygwin.patch squ

Re: [squid-users] Question about the reponse body content geted by ecap-adapter

2014-10-31 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 31/10/2014 8:00 p.m., DongMing Huang wrote: > Hi. > > As we know, the reponse body content may be encoded by web server, > for example gzip. > > Before, I think the reponse body content geted by ecap-adapter > from squid has been decoded by squid.

[squid-users] Question about the reponse body content geted by ecap-adapter

2014-10-31 Thread DongMing Huang
Hi. As we know, the reponse body content may be encoded by web server, for example gzip. Before, I think the reponse body content geted by ecap-adapter from squid has been decoded by squid. But, Now I‘m not sure about this. So, What is the really answer ? HDM1991 __