Re: [squid-users] ssl negotiation error

2019-12-02 Thread Amos Jeffries
On 3/12/19 12:19 am, robert k Wild wrote: > hi all, > > managed to get squid to work at last and i can browse all website when > my browser is going through the proxy but when i run squid i see a bunch > of errors and i havnt got a clue what its about - > You will need a packet trace on the Squi

Re: [squid-users] reverse proxy and HTTP redirects

2019-12-02 Thread Amos Jeffries
On 3/12/19 3:46 am, Vieri Di Paola wrote: > Hi, > > I configured a reverse proxy with something like this: > > https_port 10.215.145.81:50443 accel cert=/etc/ssl/whatever.cer > key=/etc/ssl/whatever_key_nopassphrase.pem > options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE,CIPHER_SERVER_PREFERENCE,No_Compres

Re: [squid-users] icap result caching in squid

2019-12-02 Thread Amos Jeffries
On 3/12/19 12:17 pm, Darren Breeze wrote: > Thanks Alex. > > That has given me the perspective I need. > > I can modulate the response header Expires value via icap to get the job done > when squid goes to cache it. > Why are you needing to do this at all? NP: please be aware that the changes

Re: [squid-users] icap result caching in squid

2019-12-02 Thread Darren Breeze
Thanks Alex. That has given me the perspective I need. I can modulate the response header Expires value via icap to get the job done when squid goes to cache it. Darren B. *Darren Breeze* Director *KSN Systems NZ Limited* **E: *dar...@ksn-systems.com* **M:* +64 274 666 017* **S:* dbinhk* On

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread --Ahmad--
Hi Alex , Thank you for your precious info . You Said “” Yes, you can. Squid logs CONNECT headers and also HTTP headers of incoming and outgoing decrypted HTTPS requests. Squid does not see (and cannot log) HTTP headers of encrypted traffic inside CONNECT tunnels that are not bumped using the S

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Alex Rousskov
On 12/2/19 2:19 PM, Ahmad Alzaeem wrote: > Can I do same  thing for https ? Yes, you can. Squid logs CONNECT headers and also HTTP headers of incoming and outgoing decrypted HTTPS requests. Squid does not see (and cannot log) HTTP headers of encrypted traffic inside CONNECT tunnels that are not bu

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Can I do same thing for https ? Thanks Sent from my iPhone > On Dec 2, 2019, at 10:03 PM, Alex Rousskov > wrote: > > On 12/2/19 1:31 PM, Ahmad Alzaeem wrote: > >> Is it possible to run it from squid ? > > Packet catpure is usually better, especially for plain HTTP traffic, but > you can

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Alex Rousskov
On 12/2/19 1:31 PM, Ahmad Alzaeem wrote: > Is it possible to run it from squid ? Packet catpure is usually better, especially for plain HTTP traffic, but you can also get raw HTTP headers in cache.log if you set debug_options in squid.conf to ALL,2 Alex. >> On Dec 2, 2019, at 8:58 PM, Antony S

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Antony Stone
On Monday 02 December 2019 at 19:31:43, Ahmad Alzaeem wrote: > Thank you for that . > > Is it possible to run it from squid ? I don't understand that question. You start Squid; it listens for incoming connections and sends them on to the external servers (and gets the responses etc, etc...) A

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Thank you for that . Is it possible to run it from squid ? Thanks Sent from my iPhone > On Dec 2, 2019, at 8:58 PM, Antony Stone > wrote: > > On Monday 02 December 2019 at 18:34:31, Ahmad Alzaeem wrote: > >> Hello Tem , >> >> How can i debug Headers that is between squid——> website reque

Re: [squid-users] debug headers between squid --> website

2019-12-02 Thread Antony Stone
On Monday 02 December 2019 at 18:34:31, Ahmad Alzaeem wrote: > Hello Tem , > > How can i debug Headers that is between squid——> website request made Run a packet sniffer (tcpdump, wireshark, tshark...) on the Squid server, looking at the external interface (ie: the one pointing to the website/s

[squid-users] debug headers between squid --> website

2019-12-02 Thread Ahmad Alzaeem
Hello Tem , How can i debug Headers that is between squid——> website request made say we have this simple topology pc ——squid —— website —> As an example if i run curl some website from my device connecting to squid proxy . $ curl -x x.x.8.187:xx433 -U abc:abc ifconfig.io/ip -vv *

[squid-users] reverse proxy and HTTP redirects

2019-12-02 Thread Vieri Di Paola
Hi, I configured a reverse proxy with something like this: https_port 10.215.145.81:50443 accel cert=/etc/ssl/whatever.cer key=/etc/ssl/whatever_key_nopassphrase.pem options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE,CIPHER_SERVER_PREFERENCE,No_Compression cipher=ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128

[squid-users] ssl negotiation error

2019-12-02 Thread robert k Wild
hi all, managed to get squid to work at last and i can browse all website when my browser is going through the proxy but when i run squid i see a bunch of errors and i havnt got a clue what its about - Error negotiating SSL connection on FD 46: error:0001:lib(0):func(0):reason(1) (1/0) its w