Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-11-01 Thread squid3
On 2022-11-02 15:35, Grant Taylor wrote: On 11/1/22 6:27 PM, squid3 wrote: The working ones deliver an HTTP/1.1 302 redirect to their companies homepage if the request came from outside the company LAN. If the request came from an administrators machine it may respond with stats data about the

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-11-01 Thread Grant Taylor
On 11/1/22 6:27 PM, squ...@treenet.co.nz wrote: No, you cropped my use-case description. It specified a client which was *unaware* that it was talking to a forward-proxy. Sorry, that was unintentional. Such a client will send requests that only a reverse-proxy or origin server can handle prop

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread squid3
On 2022-11-02 13:58, mingheng wang wrote: On Wed, Nov 2, 2022 at 6:17 AM squid3 wrote: SSL-Bump implies interception of TLS * intercept may happen at network level (port 443 redirect or NAT) * intercept may be entirely within Squid (CONNECT tunnel unwrapped) Decryption is independent of in

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread mingheng wang
On Wed, Nov 2, 2022 at 6:17 AM wrote: > On 2022-11-02 07:49, Grant Taylor wrote: > > On 11/1/22 11:33 AM, squid3 wrote: > >> That is not true as a blanket statement. > > > > Please clarify which statement / who you are addressing. > > > > It seems as if you're addressing mingheng (copied below fo

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-11-01 Thread squid3
On 2022-11-02 09:03, Grant Taylor wrote: On 11/1/22 1:24 PM, squid3 wrote: No I meant W3C. Back in the before times things were a bit messy. Hum. I have more questions than answers. I'm not aware of W3C ever assigning ports. I thought it was /always/ IANA. Indeed, thus we cannot register

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread squid3
On 2022-11-02 07:49, Grant Taylor wrote: On 11/1/22 11:33 AM, squid3 wrote: That is not true as a blanket statement. Please clarify which statement / who you are addressing. It seems as if you're addressing mingheng (copied below for convenience): Yes I was addressing mingheng's statemen

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-11-01 Thread Grant Taylor
On 11/1/22 1:24 PM, squ...@treenet.co.nz wrote: No I meant W3C. Back in the before times things were a bit messy. Hum. I have more questions than answers. I'm not aware of W3C ever assigning ports. I thought it was /always/ IANA. Indeed, thus we cannot register it with IEFT/IANA now. The

Re: [squid-users] FW: Encrypted browser-Squid connection errors

2022-11-01 Thread squid3
On 2022-11-01 11:38, Grant Taylor wrote: On 10/30/22 6:59 AM, squ...@treenet.co.nz wrote: Duane W. would be the best one to ask about the details. What I know is that some 10-12 years ago I discovered an message by Duane mentioning that W3C had (given or accepted) port 3128 for Squid use. I'v

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread Alex Rousskov
On 11/1/22 13:33, squ...@treenet.co.nz wrote: On 2022-11-02 05:44, Grant Taylor wrote: On 10/31/22 7:32 PM, mingheng wang wrote: I delved into the configuration the last few days, and found that Squid doesn't officially support cache_peer when ssl_bump is in use. That surprises me.  I wonder

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread Grant Taylor
On 11/1/22 11:33 AM, squ...@treenet.co.nz wrote: That is not true as a blanket statement. Please clarify which statement / who you are addressing. It seems as if you're addressing mingheng (copied below for convenience): On 10/31/22 7:32 PM, mingheng wang wrote: I delved into the configuratio

Re: [squid-users] Problem with wss protocol.

2022-11-01 Thread squid3
On 2022-11-02 06:59, Armando Ramos Roche wrote: Hi all. I was working with squid v3.3 on ubuntu 18.04, after migrating to ubuntu 20.04 a few months ago, squid was updated to version 3.5, currently version 3.5.27. And I have realized that nothing that uses the wss or ws protocol works for me,

[squid-users] Problem with wss protocol.

2022-11-01 Thread Armando Ramos Roche
Hi all. I was working with squid v3.3 on ubuntu 18.04, after migrating to ubuntu 20.04 a few months ago, squid was updated to version 3.5, currently version 3.5.27. And I have realized that nothing that uses the wss or ws protocol works for me, for example whatsapp, messenger etc... I've searched t

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread squid3
On 2022-11-02 05:44, Grant Taylor wrote: On 10/31/22 7:32 PM, mingheng wang wrote: Sorry about that, don't know why it only went to you. Things happen. That's why I let people know, in case unwanted things did happen. I delved into the configuration the last few days, and found that Squid

Re: [squid-users] Does Squid support client ssl termination?

2022-11-01 Thread Grant Taylor
On 10/31/22 7:32 PM, mingheng wang wrote: Sorry about that, don't know why it only went to you. Things happen. That's why I let people know, in case unwanted things did happen. I delved into the configuration the last few days, and found that Squid doesn't officially support cache_peer whe