Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2020:7 Cache Poisoning Issue in HTTP Request processing

2020-07-26 Thread Mark James
It seems they decided to patch the 4.6 they have in Debian Buster. There is no update on my Debian bug regarding promoting 4.12 to buster-backports. MarkJ > On 7 Jul 2020, at 2:20 am, Eliezer Croitor wrote: > > If someone need I can try to compile a Debian Buster compatible binary as a > d

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-26 Thread Brett Lymn
On Fri, Jul 24, 2020 at 10:44:34AM +0200, Klaus Brandl wrote: > > but then you have a single point of failure, if your loadbalancer is down, > nothing will work. We need a solution, that each system can work by itself. > So > at the moment we merge the keytabs of each system together, and we ar

Re: [squid-users] Is strip_query_terms supported in v4?

2020-07-26 Thread Ambrose Li
On Sun, Jul 26, 2020 at 12:17:04PM -0500, required.website.em...@gmail.com wrote: > strip_query_terms off [...] > gives me this: > > 1595783176 CONNECT secure.adnxs.com:443 > > 1595783177 CONNECT alb.reddit.com:443 [...] That's because https is encrypted. If you're not using ssl bump, squid has

[squid-users] Is strip_query_terms supported in v4?

2020-07-26 Thread required.website.email
I am struggling to understand why this won't work. Squid.config: # does this work? strip_query_terms off logformat sandbox %ts %rm %ru access_log /usr/local/squid/var/logs/sandbox2.log sandbox gives me this: 1595783176 CONNECT secure.adnxs.com:443 1595783177 CONNECT alb.red