[squid-users] Squid 3.5.4 + OpenBSD 5.7 + ROCK store = kid1 registration timed out

2015-05-19 Thread Henri Wahl
Good morning, I try to use rock store for cache in OpenBSD 5.7 with Squid 3.5.4. This should require SMP for the disker processes. Apparently the kids start, but what I get further is this: May 20 07:40:26 squid02 squid[29404]: Starting Squid Cache version 3.5.4 for x86_64-unknown-openbsd5.7... M

[squid-users] pass ssl through Squid reverse proxy

2015-05-19 Thread Дмитрий Лозицкий
Hello, I have a requirement to setup a reverse proxy for a secure connection to a server where tomcat is working. Services on tomcat already have ssl setup, but as tomcat doesn't have explicit certificate and a key file for ssl connection, I'd like to let the https traffic from a client to pass th

Re: [squid-users] https_port question

2015-05-19 Thread Amos Jeffries
On 20/05/2015 4:36 p.m., Alex Samad wrote: > Hi > > Looking at http://www.squid-cache.org/Doc/config/https_port/ > > I am trying to work out where I place intermediary CA certs. In the file pointed to by cacert= parameter seems to work for some. > > I am setting up a reverse proxy setup, tryi

Re: [squid-users] Storage mem in 3.5.4, not sure what is happening

2015-05-19 Thread Amos Jeffries
On 20/05/2015 3:41 a.m., Sebastian Goicochea wrote: > Hello everyone, we're having a problem, we updated from squid 3.5.3 to > 3.5.4 (bellow are the configuration options) and enabled rock fs. > > The problem that arose is that I don't know if objects are being stored > in RAM, but what I do know

[squid-users] https_port question

2015-05-19 Thread Alex Samad
Hi Looking at http://www.squid-cache.org/Doc/config/https_port/ I am trying to work out where I place intermediary CA certs. I am setting up a reverse proxy setup, trying to terminate the SSL here. cert= points to SSL certificate PEM file, this seems to be a public and private combo file. can

[squid-users] Storage mem in 3.5.4, not sure what is happening

2015-05-19 Thread Sebastian Goicochea
Hello everyone, we're having a problem, we updated from squid 3.5.3 to 3.5.4 (bellow are the configuration options) and enabled rock fs. The problem that arose is that I don't know if objects are being stored in RAM, but what I do know is that there are no MEM_HITs in the access.log file Th

Re: [squid-users] ssl_bump and SNI

2015-05-19 Thread Amos Jeffries
On 20/05/2015 1:12 a.m., sp_ wrote: > Hi, > > were there any improvements in squid 3.5 recently? > I've tried peek-n-spice again in 3.5.4, but again transparent proxy for > hosts using SNI is not working properly. > > My config for ssl-bump is the following: > > > acl step1 at_step SslBump1 >

Re: [squid-users] ssl_bump and SNI

2015-05-19 Thread sp_
Hi, were there any improvements in squid 3.5 recently? I've tried peek-n-spice again in 3.5.4, but again transparent proxy for hosts using SNI is not working properly. My config for ssl-bump is the following: -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.

Re: [squid-users] PAC file on a squid proxy

2015-05-19 Thread Amos Jeffries
On 19/05/2015 10:41 p.m., Monah Baki wrote: > Hi all, > > Our upstream proxy (cloud based) requires a PAC file to be deployed on each > workstation. Is there a way to have a PAC file on a squid servers and then > have users use the local squid servers instead. Squid does not support PAC files for

Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-19 Thread Veiko Kukk
On 18/05/15 15:28, Amos Jeffries wrote: Having a directive commented out means the default value for it is used. There is a default helper built by --enable-ssl-crtd that gets used unless you specify otherwise. Currently Squid is not detecting that the helper is unused, so checks for its existen

[squid-users] PAC file on a squid proxy

2015-05-19 Thread Monah Baki
Hi all, Our upstream proxy (cloud based) requires a PAC file to be deployed on each workstation. Is there a way to have a PAC file on a squid servers and then have users use the local squid servers instead. Thanks Monah ___ squid-users mailing list squ

Re: [squid-users] How to cache Chrome Installer ?

2015-05-19 Thread Stakres
Hi Yuri, the url does not change, i use the same url for the tests: http://r8---sn-n4g-jqbe.gvt1.com/edgedl/chrome/win/776B03BEAFB2810D/42.0.2311.152_chrome_installer.exe it should work with the storeid. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/How-to

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-19 Thread Amos Jeffries
On 19/05/2015 9:04 p.m., Amos Jeffries wrote: > On 19/05/2015 8:36 p.m., Stefan Kuegler wrote: >> >> Will the RESPMOD POSTCACHE vectoring point be available in future >> versions of squid? >> > > Unkown at this point. Its a lot of work and extra complexity we are > generally trying to avoid adding

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-19 Thread Amos Jeffries
On 19/05/2015 8:36 p.m., Stefan Kuegler wrote: > > Will the RESPMOD POSTCACHE vectoring point be available in future > versions of squid? > Unkown at this point. Its a lot of work and extra complexity we are generally trying to avoid adding. However, Alex Rousskov from Measurement Factory put a

Re: [squid-users] How to cache Chrome Installer ?

2015-05-19 Thread Amos Jeffries
On 19/05/2015 8:24 p.m., Yuri Voinov wrote: > Store ID can't get TCP_HIT. URL is changed. > > 19.05.15 3:18, Stakres пишет: >> Hi Yuri, >> >> Do you get a TCP_HIT with your rules ? >> From my side, i get this: *X-Cache: MISS* from blablabla... >> Also, X-Cache header can lie in HTTP/1.1 traffic

Re: [squid-users] squid does not send cached object to an icap-server

2015-05-19 Thread Stefan Kuegler
Hi Amos. Am 18.05.2015 um 13:39 schrieb Amos Jeffries: On 18/05/2015 11:17 p.m., Stefan Kuegler wrote: Hi Yuri. http://i.imgur.com/mW7gNwD.png http://squidclamav.darold.net/config.html This is for squidclamav (I use it and have no problems with malware). I just installed squidclamav - but

Re: [squid-users] How to cache Chrome Installer ?

2015-05-19 Thread Yuri Voinov
Store ID can't get TCP_HIT. URL is changed. 19.05.15 3:18, Stakres пишет: Hi Yuri, Do you get a TCP_HIT with your rules ? From my side, i get this: *X-Cache: MISS* from blablabla... Bye Fred -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/How-to-cache-C

Re: [squid-users] How to cache Chrome Installer ?

2015-05-19 Thread Stakres
Hi Amos, By deleting the "Vary:*" from the headers, we should be able to cache the object, correct ? And by de-duplicating using the url until the "?", we get a single object. We do all the same YouTube also containing "user" data, so I don't see why it cannot work with this Chrome Installer url..

Re: [squid-users] Squid 3.5: internal-static icons on ftp:// requests

2015-05-19 Thread Amos Jeffries
On 19/05/2015 6:29 p.m., Andre Albsmeier wrote: > When browsing e.g. > > ftp://ftp.mozilla.org/pub/thunderbird/releases/31.5.0/win32/en-GB/ > > and now the icons on ftp://ftp.mozilla.org/ appear but I wonder if it > is really needed to patch squid for that... ;-). This is http://bugs.squid-cach