Re: [squid-users] load balancer as squid

2016-05-06 Thread Amos Jeffries
On 7/05/2016 1:33 p.m., deepa ganu wrote: > Hi > I have been using squid as a reverse proxy > > > http_port 80 accel defaultsite=202.53.13.20 vhost > cache_peer 172.20.36.162 parent 80 0 proxy-only no-query no-digest > originserver name=server1 > cache_peer 172.20.36.41 parent 80 0 proxy-only no-

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Amos Jeffries
On 7/05/2016 2:43 a.m., Yuri Voinov wrote: > Raf, this is not about pinning. This is about CA store in mobile devices. > Pinning at its core is just hard-coded entries in those stores or the app. A pinned cert can be considered like the CA equivalent of having a non-editable /etc/hosts file entr

Re: [squid-users] ldap authentication with encrypted credentials

2016-05-06 Thread Amos Jeffries
On 7/05/2016 12:31 a.m., Sampei wrote: > I'm thinking to implement Basic authentication for all clients > because it's easier with my outdated systems. > In squid.conf can I use > one of these three access methods for http_access for each_client? > > 1- > only based on AD user authentication >

[squid-users] load balancer as squid

2016-05-06 Thread deepa ganu
Hi I have been using squid as a reverse proxy http_port 80 accel defaultsite=202.53.13.20 vhost cache_peer 172.20.36.162 parent 80 0 proxy-only no-query no-digest originserver name=server1 cache_peer 172.20.36.41 parent 80 0 proxy-only no-query no-digest originserver name=server2 acl sites_serve

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Or here http://wiki.pcprobleemloos.nl/android/cacert Google still rulezzz! :) PS. I haven't either iPhone or Android to verify :) because I'm not cyborg :) So.. try and tell us about results :) 07.05.16 2:18, Yuri Voinov пишет: > > Hey,

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hey, http://wiki.cacert.org/FAQ/ImportRootCert?action=show&redirect=ImportRootCert#Android_Phones can be answer? 06.05.16 20:46, Yuri Voinov пишет: > > I'm not sure, but can suggest, that android apps can contains it's own CA - built in or own

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Yuri Voinov
I'm not sure, but can suggest, that android apps can contains it's own CA - built in or own CA stores. 06.05.16 20:08, Reet Vyas пишет: Same certificate is working with iphone and I can access using ssl bump. Why not android device? On Fri, May 6, 2016 at 7:31 PM, Rafael Akchurin mailto:raf

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Yuri Voinov
Raf, this is not about pinning. This is about CA store in mobile devices. 06.05.16 20:01, Rafael Akchurin пишет: Not possible, see SSL certificate pinning in wikipedia, or at http://docs.diladele.com/faq/squid/dropbox.html Best regards, Rafael Op 6 mei 2016 om 14:27 heeft Reet Vyas

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Reet Vyas
Same certificate is working with iphone and I can access using ssl bump. Why not android device? On Fri, May 6, 2016 at 7:31 PM, Rafael Akchurin < rafael.akchu...@diladele.com> wrote: > Not possible, see SSL certificate pinning in wikipedia, or at > http://docs.diladele.com/faq/squid/dropbox.html

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Rafael Akchurin
Not possible, see SSL certificate pinning in wikipedia, or at http://docs.diladele.com/faq/squid/dropbox.html Best regards, Rafael Op 6 mei 2016 om 14:27 heeft Reet Vyas mailto:reet.vya...@gmail.com>> het volgende geschreven: Please let me know if this possible or not? On Fri, May 6, 2016 at

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Reet Vyas
Please let me know if this possible or not? On Fri, May 6, 2016 at 6:51 PM, Yuri Voinov wrote: > Android sucks and must die, yes :) > > > 06.05.16 19:11, Alex Crow пишет: > > On 06/05/16 14:09, Reet Vyas wrote: >> >>> Hi >>> >>> I have squid ssl bump working but when I added squid.crt to my and

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Yuri Voinov
Android sucks and must die, yes :) 06.05.16 19:11, Alex Crow пишет: On 06/05/16 14:09, Reet Vyas wrote: Hi I have squid ssl bump working but when I added squid.crt to my android , it not working but working with Iphone cause they have certificate installer app , I dont know exact issue cau

Re: [squid-users] SSL certifcate on android device not working

2016-05-06 Thread Alex Crow
On 06/05/16 14:09, Reet Vyas wrote: Hi I have squid ssl bump working but when I added squid.crt to my android , it not working but working with Iphone cause they have certificate installer app , I dont know exact issue cause my apps are on working . I have installed squid.crt on mobile brows

[squid-users] SSL certifcate on android device not working

2016-05-06 Thread Reet Vyas
Hi I have squid ssl bump working but when I added squid.crt to my android , it not working but working with Iphone cause they have certificate installer app , I dont know exact issue cause my apps are on working . I have installed squid.crt on mobile browsers ,internet is working but not any app

Re: [squid-users] ldap authentication with encrypted credentials

2016-05-06 Thread Sampei
I'm thinking to implement Basic authentication for all clients because it's easier with my outdated systems. In squid.conf can I use one of these three access methods for http_access for each_client? 1- only based on AD user authentication 2- only based on IP address 3- both based both on AD us

Re: [squid-users] Filtering HTTPS URLs

2016-05-06 Thread Amos Jeffries
On 6/05/2016 5:51 p.m., Victor Hugo wrote: > Here's a strange one for you though, if I change: > acl whitelist-regex url_regex -i reddit.com/r/news > > to: > acl whitelist-regex url_regex -i reddit\.com\/r\/news www\.reddit\.com\:443 > > it works every 2nd time but the match is too greedy and all