Re: [squid-users] Proxy client certificate authentication rewritten to username/password authentication

2018-10-09 Thread Amos Jeffries
On 10/10/18 11:37 AM, Alex Rousskov wrote: > > Please note that if you want to rewrite URLs of secure web sites (e.g., > "https://example.com/";), then you will be fighting an increasingly > uphill battle with modern browsers, even if Squid can do (or can be > enhanced to do) what you want. In man

Re: [squid-users] Proxy client certificate authentication rewritten to username/password authentication

2018-10-09 Thread Alex Rousskov
On 10/09/2018 02:58 PM, Arnt Richard Rørvik wrote: > The origin server does not request any certificates from the client. > We can instruct the clients to use the proxy directly, if terminating > traffic directly in Squid can easen the implementation. OK, I will assume that your clients will expl

Re: [squid-users] Proxy client certificate authentication rewritten to username/password authentication

2018-10-09 Thread Arnt Richard Rørvik
Hi, Alex! Thank you for your very kind and intelligent reply! The origin server does not request any certificates from the client. We can instruct the clients to use the proxy directly, if terminating traffic directly in Squid can easen the implementation. Furthermore, commenting your additons

Re: [squid-users] Proxy client certificate authentication rewritten to username/password authentication

2018-10-09 Thread Alex Rousskov
On 10/09/2018 01:39 PM, Arnt Richard Rørvik wrote: > Can the Squid web proxy be used to request and verify the machine > certificate of workstations trying to initiate a session towards a given > web server (outside Squid), Yes if by "machine certificate" you mean an X509 certificate that TLS se

[squid-users] Proxy client certificate authentication rewritten to username/password authentication

2018-10-09 Thread Arnt Richard Rørvik
Hi, Squid users, strategists, designers and developers! Can the Squid web proxy be used to request and verify the machine certificate of workstations trying to initiate a session towards a given web server (outside Squid), and, rewrite this session initiation on the way out (towards the the giv

Re: [squid-users] socket failure: (24) Too many open files

2018-10-09 Thread Cherukuri, Naresh
Thank you for quickturnover! I bumped FD from 8k to 16k. Thanks, Naresh -Original Message- From: Eliezer Croitoru [mailto:elie...@ngtech.co.il] Sent: Monday, October 8, 2018 3:18 PM To: Cherukuri, Naresh Cc: 'squid-users@lists.squid-cache.org' Subject: Re: [squid-users] socket failure

Re: [squid-users] Running Squid fully as root

2018-10-09 Thread reinerotto
Found a workaround: Within my external helper (busybox shell-script) I start the other process (chilli_query) using sudo. That works fine for me. So we can cosider this issue solved. Thanx a lot. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___