Re: [squid-users] Squid typo fixes for 4.12

2020-07-21 Thread Amos Jeffries
On 30/06/20 7:38 pm, L.P.H. van Belle wrote: > Hai, > > Sorry for not pushing this through git. > If you want some typo fixed, here you go. > > > Fixed typo's found by Lintian on Debian Buster. > --- a/src/ssl/crtd_message.cc > +++ b/src/ssl/crtd_message.cc > @@ -206,7 +206,7 @@ > i = map

Re: [squid-users] squid kerberos auth, acl note group

2020-07-21 Thread Alex Rousskov
On 7/21/20 10:41 AM, Klaus Brandl wrote: > we have a problem with the squid kerberos auth helper and the note acl > matching to user groups in an active directory. > First the user was in one group, which was configured via the groupSid base64 > string as a note acl, and this was working very we

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Alex Rousskov
On 7/21/20 3:41 AM, Dieter Bloms wrote: > for some sites like https://mycase.cloudapps.cisco.com/ > squid doesn't fetch the intermediate certificate and returns > X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY The underlying problem is not specific to SslBump AFAICT. The combination of unfortunate

[squid-users] squid kerberos auth, acl note group

2020-07-21 Thread Klaus Brandl
Hi there, we have a problem with the squid kerberos auth helper and the note acl matching to user groups in an active directory. First the user was in one group, which was configured via the groupSid base64 string as a note acl, and this was working very well. Then there was added a new group to

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Dieter Bloms
Hello Matus, thank you for your answer. On Tue, Jul 21, Matus UHLAR - fantomas wrote: > On 21.07.20 09:41, Dieter Bloms wrote: > > we use the sslbump feature and it works very well. > > But some sites can't be reached because of missing intermediate > > certificate. > > > > In squid.conf we hav

[squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Dieter Bloms
Hello, we use the sslbump feature and it works very well. But some sites can't be reached because of missing intermediate certificate. In squid.conf we have configured the following parameters: --snip-- # allow fetching of missing intermediate certificates acl fetch_intermediate_certificate tran

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Matus UHLAR - fantomas
On 21.07.20 09:41, Dieter Bloms wrote: we use the sslbump feature and it works very well. But some sites can't be reached because of missing intermediate certificate. In squid.conf we have configured the following parameters: --snip-- # allow fetching of missing intermediate certificates acl fe