Re: [squid-users] Tutorial for better authentication than basic

2017-05-01 Thread Amos Jeffries
On 02/05/17 09:04, j m wrote: Wow, I didn't find that one. Not super secure, but better than clear text and I'm not too worried about someone sniffing my packets. The security level with Digest depends on the nonce lifetime and reuse counter, both of which you can tune to your liking. The s

Re: [squid-users] Squid cannot parse Content-Length header value and closes connection before sending body?

2017-05-01 Thread Alex Rousskov
On 05/01/2017 04:12 PM, Masha Lifshin wrote: > when I turn on icap, squid shuts down the connection early, > without returning the body of the response. It seems it cannot read the > content length header and that messes up both squid and icap. > 2017/04/28 08:11:47.297 kid1| 55,2| HttpHeader.cc

[squid-users] Squid cannot parse Content-Length header value and closes connection before sending body?

2017-05-01 Thread Masha Lifshin
Dear squid-users mailing list, Thank you for reading this message and for all your hard work on this great project. I have inherited a Squid 3.5.2 install, with ecap, icap, and custom respmod and reqmod icap services. I am upgrading to Squid 4, adding ssl-bump, and upgrading c-icap to 0.5.2. Wh

Re: [squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
Wow, I didn't find that one.  Not super secure, but better than clear text and I'm not too worried about someone sniffing my packets. From: Eliezer Croitoru To: 'j m' ; squid-users@lists.squid-cache.org Sent: Monday, May 1, 2017 3:30 PM Subject: RE: [squid-users] Tutorial for better au

Re: [squid-users] Tutorial for better authentication than basic

2017-05-01 Thread Eliezer Croitoru
And what about digest authentication? http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of j m Sent: Monday, May 1, 2017 4:18 PM To: squid-users@lists.squ

[squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
I'm using Ubuntu 16.04 Server in the home and would like to set up a proxy server for use from over the Internet.  The main purpose for this is to easily access a few web-devices on my LAN without using VPN, and at times to route web traffic from a remote location through my home ISP.  I do not

Re: [squid-users] squid 4.0.19 error with certificates

2017-05-01 Thread Yuri
Byte hit is caching related. This is most important functionality for me. 01.05.2017 15:16, marco пишет: Thanks. What means drop byte hit? I just wanna bump a few sites, and pass the rest. Why isnt that a good solution? Is it bad form performance? It disables HTTPS caching completely. marco

Re: [squid-users] squid 4.0.19 error with certificates

2017-05-01 Thread Amos Jeffries
On 01/05/17 21:16, marco wrote: Thanks. What means drop byte hit? I just wanna bump a few sites, and pass the rest. Why isnt that a good solution? Is it bad form performance? Yuri prizes caching over everything, including correctly behaving HTTP(S) and user experience. If the solution work

Re: [squid-users] squid 4.0.19 error with certificates

2017-05-01 Thread marco
Thanks. What means drop byte hit? I just wanna bump a few sites, and pass the rest. Why isnt that a good solution? Is it bad form performance? [marco - Contact Using Hop](http://GetHop.com/?_hmid=1493630170) On May 1, 2017 at 9:13 GMT, Yuri wrote: Sorry, this is not solution. All https spliced

Re: [squid-users] squid 4.0.19 error with certificates

2017-05-01 Thread Yuri
Sorry, this is not solution. All https spliced means for me catastrophyc drop byte hit. I knew about this wrkarnd from the beginning. But this is unacceptable. At maximum this is temporary workaround. 01.05.2017 15:10, marco пишет: solution: all monitoredsites, m1 m2 are bumped correctly all

Re: [squid-users] squid 4.0.19 error with certificates

2017-05-01 Thread marco
solution: all monitoredsites, m1 m2 are bumped correctly all others are spliced squid4 this works great. just contact me for questions. acl monitoredSites ssl::server_name_regex -i (phncdn|ypncdn|heise|rncdn|youporn) acl m1 ssl::server_name_regex -i \.youporn\.com acl m2 ssl::server_name_regex