Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread Alex Crow
i dont get any errors but when i run the below i get warnings  /usr/local/bin/c-icap WARNING Bad configuration keyword: enable_libarchive 0 WARNING Bad configuration keyword: banmaxsize 2M thanks, rob You should be asking these questions on whatever resources c-icap provide for that purpose

Re: [squid-users] Is there a way on client to show proxy's certificate?

2019-12-21 Thread GeorgeShen
> how is port 3129 defined in squid.conf? ssl_bump peek step1 ssl_bump stare step2 ssl_bump bump all http_port 3128 http_port 3129 ssl-bump cert=/usr/local/squid/etc/ssl_cert/myCA.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MB options=SINGLE_DH_USE:SINGLE_ECDH_USE tls-dh=prime

Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread Alex Crow
robert, I'd go the ecap way if I was you - no daemons to set up, just a library. c-icap has always been an issue as distros packages have never really acknowledged it exists in terms of permissions. The ecap way avoids all of that mess entirely. http://www.e-cap.org/docs/ http://www.e-cap.o

Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread robert k Wild
finally getting somewhere, i did - mkdir /var/run/c-icap chown squid:squid /var/run/c-icap/ chmod 700 /var/run/c-icap/ and now when i run - /usr/local/bin/c-icap -N -D -d 10 i dont get any errors but when i run the below i get warnings /usr/local/bin/c-icap WARNING Bad configuration keyword:

Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread robert k Wild
worked it out but c-icap doesnt run, i get this error (only showing the error not the whole info) - /usr/local/bin/c-icap -N -D -d 10 Cannot open the pid file: /var/run/c-icap/c-icap.pid but in my "c-icap.conf" the pid file is uncommented so i really dont know why its not starting up thanks, r

Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread robert k Wild
thanks Amos i did this mkdir -p /usr/local/clamav/share/clamav ln -s /var/lib/clamav /usr/local/clamav/share/clamav but how do i start up the c-icap service as that how to doesnt state how to make a c-icap service? thanks, rob On Sat, 21 Dec 2019 at 16:36, Amos Jeffries wrote: > On 22/12/19

Re: [squid-users] c-icap documentation getting stuck

2019-12-21 Thread Amos Jeffries
On 22/12/19 4:25 am, robert k Wild wrote: > hi all, > > following this guide and so far so good > > https://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP > > when i was configuring the clamav i followed this link > > https://hostpresto.com/community/tutorials/how-to-install-clama

[squid-users] c-icap documentation getting stuck

2019-12-21 Thread robert k Wild
hi all, following this guide and so far so good https://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP when i was configuring the clamav i followed this link https://hostpresto.com/community/tutorials/how-to-install-clamav-on-centos-7/ im getting stuck on this bit ln -s /var/lib

Re: [squid-users] Is there a way on client to show proxy's certificate?

2019-12-21 Thread Matus UHLAR - fantomas
The same openssl command can connect to any type of TLS server. On 21.12.19 00:02, GeorgeShen wrote: True. But the proxy server may not run normal TLS service or listen on the port 443. The proxy with SSL-Bump is listening on the 3129 for example, I have certainly tried: openssl s_client -conn