Re: [squid-users] Help troubleshooting proxy<-->client https

2017-06-02 Thread Masha Lifshin
Thank you very much Amos and Alex for the helpful explanations, high level of detail, and for tracking down that this combo is not possible at this time. We're going to evaluate what to do next with this info. I'll probably be following up with more questions soon. -M On Fri, Jun 2, 2017 at 9:05

[squid-users] Squid + Shibboleth/SAML Authentication

2017-06-02 Thread Rick W
Hi, Can you tell me if it's possible to configure squid to allow access to some websites protected by Shibboleth/SAML Authentication. Without Squid, access works correctly. In my access.log the connection stop after this line : TCP_MISS/502 5050 POST http://abonnes.efl.fr/Shibboleth.sso/SAML/P

Re: [squid-users] Help troubleshooting proxy<-->client https

2017-06-02 Thread Alex Rousskov
On 06/01/2017 01:26 PM, Alex Rousskov wrote: > On 06/01/2017 11:29 AM, Alex Rousskov wrote: > * HTTPS proxy is a rarely used feature that works well for some. > * SslBump is a frequently used feature that works well enough for some. > Disclaimer: I do not know of anybody using the _combination_ o

Re: [squid-users] FW: squid proxy 3.5 redhat 7.3

2017-06-02 Thread Alex Rousskov
On 06/02/2017 01:37 AM, Madonna, A. (spir-it) wrote: > Clients -> squid proxy -> internet. > This works with the config as previously mentioned. OK. > Clients -> squid proxy (with cache_peer) -> Parent Proxy (not Squid) -> > internet > Does not work. Even for regular HTTP traffic and non-bump

[squid-users] FW: squid proxy 3.5 redhat 7.3

2017-06-02 Thread Madonna, A. (spir-it)
Hello Alex, Our setup is as follows: Clients -> squid proxy -> internet. This works with the config as previously mentioned. Clients -> squid proxy (with cache_peer) -> Parent Proxy (not Squid) -> internet Does not work. However I've also setup the following: Cleints -> Squid Proxy (with cach