Re: [squid-users] Squid-4.0.9 and FreeBSD 9.3 / FreeBSD-10.3

2016-04-22 Thread Amos Jeffries
On 23/04/2016 4:24 p.m., Amos Jeffries wrote: > On 22/04/2016 8:03 a.m., Odhiambo Washington wrote: >> On 21 April 2016 at 21:52, Amos Jeffries wrote: >> >>> On 22/04/2016 6:12 a.m., Odhiambo Washington wrote: Hi Amos, I have just now succeeded in compiling squid-4.0.9 on FreeBSD 10.

Re: [squid-users] Squid-4.0.9 and FreeBSD 9.3 / FreeBSD-10.3

2016-04-22 Thread Amos Jeffries
On 22/04/2016 8:03 a.m., Odhiambo Washington wrote: > On 21 April 2016 at 21:52, Amos Jeffries wrote: > >> On 22/04/2016 6:12 a.m., Odhiambo Washington wrote: >>> Hi Amos, >>> >>> I have just now succeeded in compiling squid-4.0.9 on FreeBSD 10.3 and >> I'm >>> even able to run it. >>> The server

Re: [squid-users] Squid SSL Bump

2016-04-22 Thread Amos Jeffries
On 23/04/2016 7:02 a.m., Zee wrote: > I am doing SSL bump it seems like Squid utilizes openssl library. I went > ahead and updated openssl library to reflect new CA certificates, but it > still fails to work and I see the following error. > "The system returned: > (71) Protocol error (TLS code: X

Re: [squid-users] Need help with Squid on Windows

2016-04-22 Thread Amos Jeffries
On 23/04/2016 3:09 a.m., Jason Spegal wrote: > Hello all, > > I need help with an issue that is now beyond me. I've installed squid > 3.5.16 (From: http://squid.diladele.com/) on my Windows 10 laptop, and > I'm trying to enable the URL Rewrite helpers that I wrote in perl for my > linux server. I'

Re: [squid-users] change between squid 3.1 and 3.3.8

2016-04-22 Thread Amos Jeffries
On 23/04/2016 2:40 a.m., FTRIF wrote: > Hello, > i have a problem using /usr/lib/squid3/ext_ldap_group_acl which appears in > 3.3.8 > > i have a ldap attribut called InternetAccess which contains the value > "ACCESSINTER" > > i want to make an ACL to authorize such people to surf on the net by us

[squid-users] Squid SSL Bump

2016-04-22 Thread Zee
I am doing SSL bump it seems like Squid utilizes openssl library. I went ahead and updated openssl library to reflect new CA certificates, but it still fails to work and I see the following error. "The system returned: (71) Protocol error (TLS code: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY)"

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Alex Rousskov
On 04/22/2016 09:19 AM, Odhiambo Washington wrote: > Can I terminate based on time? Yes. You can terminate based on any information except information contained inside HTTP messages. Time is always available. ssl::server_name will give you an approximation of what you call "site". > By just mod

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Odhiambo Washington
Can I terminate based on time? By just modifying the bits you wrote for me? On 17:45, Fri, Apr 22, 2016 Amos Jeffries wrote: > On 23/04/2016 12:39 a.m., Odhiambo Washington wrote: > > > > So is it possible to achieve such a non-intrusive setup, but without > > 'terminate'? > > You declared the r

[squid-users] change between squid 3.1 and 3.3.8

2016-04-22 Thread FTRIF
Hello, i have a problem using /usr/lib/squid3/ext_ldap_group_acl which appears in 3.3.8 i have a ldap attribut called InternetAccess which contains the value "ACCESSINTER" i want to make an ACL to authorize such people to surf on the net by using a ldap_group, built with the people who had the va

[squid-users] Need help with Squid on Windows

2016-04-22 Thread Jason Spegal
Hello all, I need help with an issue that is now beyond me. I've installed squid 3.5.16 (From: http://squid.diladele.com/) on my Windows 10 laptop, and I'm trying to enable the URL Rewrite helpers that I wrote in perl for my linux server. I've already done the necessary adjustments to them to

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Amos Jeffries
On 23/04/2016 12:39 a.m., Odhiambo Washington wrote: > > So is it possible to achieve such a non-intrusive setup, but without > 'terminate'? You declared the requirement "Serve an error page.". That is intrusive. As Alex has said repeatedly: terminate or produce an error. Pick one. Amos ___

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 22.04.16 18:39, Odhiambo Washington пишет: > > > On 22 April 2016 at 13:45, Amos Jeffries mailto:squ...@treenet.co.nz>> wrote: > > On 22/04/2016 8:23 p.m., Odhiambo Washington wrote: > > > > Sure, I am really struggling to understand

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Odhiambo Washington
On 22 April 2016 at 13:45, Amos Jeffries wrote: > On 22/04/2016 8:23 p.m., Odhiambo Washington wrote: > > > > Sure, I am really struggling to understand this. I would like to serve > > error pages. A complete example of this would really help. I am thinking, > > based on the two templates you gav

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Amos Jeffries
On 22/04/2016 8:23 p.m., Odhiambo Washington wrote: > > Sure, I am really struggling to understand this. I would like to serve > error pages. A complete example of this would really help. I am thinking, > based on the two templates you gave and going with the one where squid > intrudes, that it co

Re: [squid-users] High CPU Usage with ssl_bump

2016-04-22 Thread Odhiambo Washington
On 22 April 2016 at 02:16, Alex Rousskov wrote: > On 04/21/2016 03:26 PM, Odhiambo Washington wrote: > > On 21 April 2016 at 23:14, Alex Rousskov wrote: > > Logging aside, your latest random configuration is equivalent to > > [...] not intercepting SSL at all, which brings > > us back