[squid-users] squidaio_queue_request: WARNING - Queue congestion

2015-10-14 Thread Reet Vyas
HI I am getting this error in my squid, Squid Version : 3.5.3, Can anyone help me out with this cause browsing is slow when I get this in cache.log file. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listin

squid-users@lists.squid-cache.org

2015-10-14 Thread Бараблин Дмитрий
Hello all! im trying to configure squid 3.5.8 as intercept with Whitelist ACLs on HTTP and HTTPS. what my config: acl localnet src 10.0.0.0/8 # RFC1918 possible internal network acl whitelist dstdom_regex -i "/etc/squid/whitelist" acl SSL_ports port 443 acl Safe_ports port 80 # h

Re: [squid-users] ssl_crtd initialization SSL db error

2015-10-14 Thread Amos Jeffries
On 15/10/2015 9:51 a.m., Ian Silvester wrote: > Hi all, > > I'm following the instructions on this page > http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit > to set up Squid as an end-point for HTTPS communications, and am hitting > an error when attempting to create and initial

Re: [squid-users] debug skype ssl_bump numeric ips to be spliced

2015-10-14 Thread Amos Jeffries
On 15/10/2015 1:00 a.m., Marko Cupać wrote: > Hi, > > I read this interesting thread: > http://squid-web-proxy-cache.1019090.n4.nabble.com/Skype-SSL-is-incompatible-with-OpenSSL-td4665803.html > > And from what I read, I'd assume those entries in cache.log ... > > 2015/10/14 13:44:51 kid1| Error

Re: [squid-users] Safari 9 vs. SSL Bump

2015-10-14 Thread Alex Rousskov
On 10/14/2015 05:00 PM, Dan Charlesworth wrote: > I feel like if server-first is working there must be *some* > combination of peek/stare/bump that’ll work too—it can’t be that > “forward secrecy” cipher stuff. While that feeling is natural, you should resist it. Newer SslBump actions do not sim

Re: [squid-users] Safari 9 vs. SSL Bump

2015-10-14 Thread Dan Charlesworth
Thanks for clarifying, Alex. We tried this config but Safari still doesn’t like it, sadly. I feel like if server-first is working there must be *some* combination of peek/stare/bump that’ll work too—it can’t be that “forward secrecy” cipher stuff. I really don’t want our customers to have to

Re: [squid-users] Redirect site.ca to site.qc.ca

2015-10-14 Thread Eliezer Croitoru
Hey, Antony: It depends. and also squid has the capability to redirect traffic without Redirectors and the recommendation is still staying that if you can use some variation of squid settings to result a redirection such as deny_info use it instead of an external helper. Sebastian: It is ver

Re: [squid-users] Negotiateauthenticator processes are busy

2015-10-14 Thread Markus Moeller
What happens if you adjust the system time to be in sync with the AD server ? Markus "Михаил" wrote in message news:1462781444845...@web15m.yandex.ru... Hi All! Sometime I get a error message and squid stop: 2015/10/14 14:31:51| WARNING: All 300/300 negotiateauthenticator processes are busy.

[squid-users] ssl_crtd initialization SSL db error

2015-10-14 Thread Ian Silvester
Hi all, I'm following the instructions on this page http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit to set up Squid as an end-point for HTTPS communications, and am hitting an error when attempting to create and initialize an SSL certificates cache directory. Having take

Re: [squid-users] Redirect site.ca to site.qc.ca

2015-10-14 Thread Antony Stone
On Wednesday 14 October 2015 at 20:33:10, sebastien.boulia...@cpu.ca wrote: > Hi, > > How do you recommend me to configure Squid to redirect request on > example.ca to example.qc.ca ? My personal recommendation would be to use a search engine such as Google to look for information about "Squid"

[squid-users] Redirect site.ca to site.qc.ca

2015-10-14 Thread Sebastien.Boulianne
Hi, How do you recommend me to configure Squid to redirect request on example.ca to example.qc.ca ? Thanks you very much. Sebastien ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Negotiateauthenticator processes are busy

2015-10-14 Thread Михаил
Hi All!Sometime I get a error message and squid stop:2015/10/14 14:31:51| WARNING: All 300/300 negotiateauthenticator processes are busy.2015/10/14 14:31:51| WARNING: 300 pending requests queued2015/10/14 14:31:51| WARNING: Consider increasing the number of negotiateauthenticator processes in your

Re: [squid-users] Safari 9 vs. SSL Bump

2015-10-14 Thread Alex Rousskov
On 10/13/2015 09:08 PM, Dan Charlesworth wrote: > But in reality ssl_bump peek step1 & ssl_bump bump step3 is actually > splicing everything, it seems. This may not be related to your specific problem, but I want to clarify the above. ssl_bump peek step1 ssl_bump bump step3 A recent Squid

Re: [squid-users] Ssl-Bump and revoked server certificates

2015-10-14 Thread Sebastian Kirschner
Hi Walter, do you have an update regarding your correct certificate validator ? Mit freundlichen Grüßen / Best Regards Sebastian Kirschner ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] debug skype ssl_bump numeric ips to be spliced

2015-10-14 Thread Marko Cupać
Hi, I read this interesting thread: http://squid-web-proxy-cache.1019090.n4.nabble.com/Skype-SSL-is-incompatible-with-OpenSSL-td4665803.html And from what I read, I'd assume those entries in cache.log ... 2015/10/14 13:44:51 kid1| Error negotiating SSL on FD 144: error:14090086:SSL routines:SSL

Re: [squid-users] decreased requests per second with big file size

2015-10-14 Thread Eliezer Croitoru
OK then tcp it is. An example line by line daemon handler which can be extended to be customized with ip+port selection and many other features. http://paste.ngtech.co.il/psgfb2lci It can be used with a DB or to just store the statistics internally. It is very simple due to the one direction an