Re: [squid-users] squid 5.0.4 cache_peer bug on https outgoing

2020-09-27 Thread openwrt
Yes, I've tried all of these combinations. ### 0x00 cache_peer no ssl > ssl_bump allow all > cache_peer 127.0.0.1 parent 3129 0 【no ssl】 curl http://google.com -x http://admin:squid@localhost :3128 -v -k 【it is ok】 curl https://google.com -x https://admin:squid@localhos

Re: [squid-users] squid 5.0.4 cache_peer bug on https outgoing

2020-09-27 Thread Alex Rousskov
On 9/27/20 12:07 PM, sec wrote: > http_port 3128 ssl-bump ... > curl http://google.com -x https://admin:squid@localhost:3128 -v -k The above two lines do not match AFAICT: You tell curl to use an HTTPS proxy, but you tell Squid to expect plain HTTP proxy requests. Also, please note that if you

[squid-users] squid 5.0.4 cache_peer bug on https outgoing

2020-09-27 Thread sec
X-Squid-Error: ERR_SECURE_CONNECT_FAIL 71 Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE) ### 0x01 squid version squid -v Squid Cache: Version 5.0.4 Service Name: squid This binary uses OpenSSL 1.0.2g 1 Mar 2016. For legal restrictions on distribution see https://www.openssl.org/source/li