Re: [squid-users] HTTPS and HTTP bypass authentication for certain sites

2020-05-28 Thread Alex Rousskov
On 5/28/20 3:19 AM, Antonino Gianfranco Sanacori wrote: > I have a 4.6 server Squid, i want to configure it for to permit the free > access, with http and https,  to some ip address to my users. > I have read that i can use ssl_bump splice acl, then i can configure in > this way? You do not need

Re: [squid-users] HTTPS_PORT AND SSL CERT

2020-05-28 Thread Julien TEHERY
Yes, that's what i did. As I explained before, i provided to squid a pem file containing: * sever key * server cert * intermediate cert with in squid.conf: https_port 8443 tls-cert=path/to/my/wildcard.pem I did not try to add root cert as i'm aware it's not necessary I've spent s

Re: [squid-users] HTTPS_PORT AND SSL CERT

2020-05-28 Thread Matus UHLAR - fantomas
On 28.05.20 06:32, Julien TEHERY wrote: I retried everything possible in terms of order in the pem file. from my workstation, if i do "openssl s_client -showcerts -connect mysquid.mycompany.com:8443" i only get one certificate/issuer, but the same command on same server but different port (apac

[squid-users] HTTPS and HTTP bypass authentication for certain sites

2020-05-28 Thread Antonino Gianfranco Sanacori
Hi. I have a 4.6 server Squid, i want to configure it for to permit the free access, with http and https,  to some ip address to my users. I have read that i can use ssl_bump splice acl, then i can configure in this way? acl list dstdomain "file.acl" ssl_bump splice list http_access allow