[squid-users] Assert, followed by shm_open() fail.

2015-11-09 Thread Steve Hill
On Squid 3.5.11 I'm seeing occasional asserts: 2015/11/09 13:45:21 kid1| assertion failed: DestinationIp.cc:41: "checklist->conn() && checklist->conn()->clientConnection != NULL" More concerning though, is that usually when a Squid process crashes, it is automatically restarted, but followin

Re: [squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-09 Thread Amos Jeffries
On 10/11/2015 6:12 a.m., Sreenath BH wrote: > Hi Alex, > > thanks for your detailed asnwers. > > Here are more details. > 1. If the URL does not have any token, we would like to send an error > message back to the browser/client, without doing a cache lookup, or > going to backend apache server.

Re: [squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-09 Thread Sreenath BH
Hi Alex, thanks for your detailed asnwers. Here are more details. 1. If the URL does not have any token, we would like to send an error message back to the browser/client, without doing a cache lookup, or going to backend apache server. 2. If the token is invalid (that is we can't find it in a d

Re: [squid-users] What does this error mean?

2015-11-09 Thread Amos Jeffries
On 10/11/2015 1:54 a.m., Yuri Voinov wrote: > > This mean that client sent RST packet. You can ignore this error. > Well, its not always the client sending it. Could be a NAT device somewhere hitting some timeout or connnection limit and aborting idle connections. If it is occuring a lot then i

Re: [squid-users] ssl_bump with cache_peer problem: Handshake fail after Client Hello.

2015-11-09 Thread Amos Jeffries
On 9/11/2015 10:43 p.m., maple wrote: > Hi Amos, > > thanks for confirmation, but I'm not sure if my upstream proxy support > TLS/SSL in that way as you said, but we can use it to proxy both http and > https request, does it mean it support TLS/SSL? > > To be honest, I'm not familiar with princip

Re: [squid-users] Refresh_pattern % bug ?

2015-11-09 Thread FredB
> > > > The fix is not present in Squid 3.5.11, > > Correct. > > > only for 4 ? > > For now. I expect to do the backports later today, but one never > knows. > > Amos > ___ Ok, no problem, thanks Fred _

Re: [squid-users] squid module to "simulate" CONNECT setup to facilitate intercepted https

2015-11-09 Thread Amos Jeffries
On 9/11/2015 7:33 p.m., Mark Carey wrote: > Hi, > > Squid has some great features for traffic managament policy and accounting. > > The web is moving more and more to https which negates squids > advantages in caching. I know that squid can not transparently proxy > https - i've run squid in int

Re: [squid-users] Refresh_pattern % bug ?

2015-11-09 Thread Amos Jeffries
On 9/11/2015 11:53 p.m., FredB wrote: > >> >> If you would. I'm a little too busy to do it right away. >> >> Amos >> > > Hi Amos, > > The fix is not present in Squid 3.5.11, Correct. > only for 4 ? For now. I expect to do the backports later today, but one never knows. Amos _

Re: [squid-users] squid module to "simulate" CONNECT setup to facilitate intercepted https

2015-11-09 Thread Alex Rousskov
On 11/08/2015 11:33 PM, Mark Carey wrote: > What I am interested in is whether there is or ever was a squid module that; > > 1. is suitable for running in intercept mode > > 2. maintains a list of active https connections > > 3. checks the acls to see if access is permitted, to the extent > per

Re: [squid-users] What does this error mean?

2015-11-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This mean that client sent RST packet. You can ignore this error. 09.11.15 18:49, Patrick Flaherty пишет: > Hello, > > > > I'm new to Squid, I have it up and running and it's working well. But I am > getting an error in the CACHE LOG that I canno

[squid-users] What does this error mean?

2015-11-09 Thread Patrick Flaherty
Hello, I'm new to Squid, I have it up and running and it's working well. But I am getting an error in the CACHE LOG that I cannot pin down either through packet traces or the ACCESS LOG. The error is: 2015/11/08 16:57:24 kid1| local=192.168.1.1:3128 remote=192.168.1.215:2034 FD 11 flags=1:

Re: [squid-users] Refresh_pattern % bug ?

2015-11-09 Thread FredB
> > If you would. I'm a little too busy to do it right away. > > Amos > Hi Amos, The fix is not present in Squid 3.5.11, only for 4 ? Fred ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-us

Re: [squid-users] ssl_bump with cache_peer problem: Handshake fail after Client Hello.

2015-11-09 Thread maple
Hi Amos, thanks for confirmation, but I'm not sure if my upstream proxy support TLS/SSL in that way as you said, but we can use it to proxy both http and https request, does it mean it support TLS/SSL? To be honest, I'm not familiar with principle of http/https proxy at all, for solving this prob