Re: [squid-users] annotation and fast / slow acl

2017-06-21 Thread Amos Jeffries
On 22/06/17 04:51, FUSTE Emmanuel wrote: So arbitrary k- v pair not used by the acl helper protocol could be matched against with the note acl ? How it relate to the defined/reserved tag= and clt_conn_tag= keywords of the acl helper protocol ? They are all attached as annotations on the transa

Re: [squid-users] annotation and fast / slow acl

2017-06-21 Thread FUSTE Emmanuel
Hello, One more question to be sure to understand some details: > Le 20/06/2017 à 14:46, Amos Jeffries a écrit : >> On 20/06/17 22:55, FUSTE Emmanuel wrote: >>> Hello, >>> >>> I need to select a cache peer based on the user group. >>> As cache_peer_access need a fast acl to have predicable result

Re: [squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-21 Thread Alex Rousskov
On 06/21/2017 10:15 AM, Nikita wrote: > Is it possible to allow self-signed SSL certificates for ICAP server > connections somehow? Can you configure your OpenSSL library (or equivalent) to trust the ICAP server certificate? Squid deletages most of the certificate validation work to OpenSSL (or e

[squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-21 Thread Nikita
Hello, I'm trying to integrate Squid with secure ICAP server over icaps:// protocol for two-way authentication (icap_service configuration directive). I find out that Squid reject self-signed certificate of ICAP server and there is no obvious workaround. There is tls-flags=DONT_VERIFY_PEER flag,