[squid-users] Cert download from AIA information succeeds yet Squid reports ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY

2018-05-21 Thread Ahmad, Sarfaraz
Hi, I have setup Squid as a SSL MITM proxy. I am also using the cert download feature with these configurations in my squid.conf acl cert_fetch transaction_initiator certificate-fetching http_access allow cert_fetch Websites where certificates just share AIA information using CA-issuer method,

Re: [squid-users] cache_peer to SSL/TLS proxy

2018-05-21 Thread Alex Rousskov
On 05/21/2018 10:22 AM, Carlos Cesar Caballero Díaz wrote: > Right now I am working against a squid proxy wich is using SSL/TLS > (encrypted browser-squid connection) and as you know there are a lot of > applications that does not work with this kind of proxy configuration. > In other ocations, I

Re: [squid-users] cache_peer to SSL/TLS proxy

2018-05-21 Thread Amos Jeffries
On 22/05/18 04:22, Carlos Cesar Caballero Díaz wrote: > can I use cache_peer against a > parent proxy whish is using SSL/TLS for encrypted browser-squid > connection? An if it is possible, How? > Add the "ssl" (Squid-3) or "tls" (Squid-4) option to your cache_peer line and all traffic to that pe

[squid-users] cache_peer to SSL/TLS proxy

2018-05-21 Thread Carlos Cesar Caballero Díaz
Hi, I am really new with squid, an I am trying to solve an issue. Right now I am working against a squid proxy wich is using SSL/TLS (encrypted browser-squid connection) and as you know there are a lot of applications that does not work with this kind of proxy configuration. In other ocations,

Re: [squid-users] passwd problem

2018-05-21 Thread Amos Jeffries
On 22/05/18 00:35, Alex Gutiérrez Martínez wrote: >> On 12/05/18 00:30, Alex Gutiérrez Martínez wrote: >>> Hello community, yesterday i noticed that one of my users is using a >>> private squid to avoid the tedious problem of typing the password every >>> time he starts session in his browser. The

Re: [squid-users] The right way how to increase max_filedescriptors on Linux

2018-05-21 Thread Amos Jeffries
On 22/05/18 00:08, kAja Ziegler wrote: > Hi, > >   I want to ask, if it is really needed to use ulimit or > /etc/security/limits.conf to increase max_filedescriptors value? From my > testing, it seems not. Sometimes yes, sometimes no. It depends on what the systems normal settings are and whether

[squid-users] passwd problem

2018-05-21 Thread Alex Gutiérrez Martínez
On 12/05/18 00:30, Alex Gutiérrez Martínez wrote: Hello community, yesterday i noticed that one of my users is using a private squid to avoid the tedious problem of typing the password every time he starts session in his browser. The problem is that the squid suddenly started to return in plain t

[squid-users] The right way how to increase max_filedescriptors on Linux

2018-05-21 Thread kAja Ziegler
Hi, I want to ask, if it is really needed to use ulimit or /etc/security/limits.conf to increase max_filedescriptors value? From my testing, it seems not. *= my environment:* CentOS 6.9 Squid 3.1.23 / 3.4.14 *- default ulimits for root and other users:* [root@...]# ulimit -Sa | grep -- '-n'