Re: [squid-users] Ubuntu 22.04 LTS repository for Squid 6.9 (rebuilt from sources in Debian)

2024-04-11 Thread Dmitry Melekhov
11.04.2024 13:30, Rafael Akchurin пишет: Hello everyone, Online repository with latest Squid 6.9 why not 6.10? ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Compilation error for v6.8

2024-03-14 Thread Dmitry Melekhov
14.03.2024 16:21, Miha Miha пишет: Hello Squid team, I get following error while compiling v6.8 ... In file included from basic_nis_auth.cc:15: ../../../../src/auth/basic/NIS/nis_support.h:8: error: unterminated #ifndef #ifndef SQUID_SRC_AUTH_BASIC_NIS_NIS_SUPPORT_H basic_nis_auth.cc: In funct

Re: [squid-users] squid 6.1 esi compile error, ubuntu 22.04

2023-08-07 Thread Dmitry Melekhov
07.08.2023 17:27, Alex Rousskov пишет: On 8/7/23 04:00, Dmitry Melekhov wrote: Built  using --disable-esi without problems. First of all, if you do not need ESI, I recommend building with --disable-esi to avoid accidental exposure to dangerous ESI bugs in deployments that should not be

[squid-users] squid 6.1 esi compile error, ubuntu 22.04

2023-08-07 Thread Dmitry Melekhov
Hello! Built  using --disable-esi without problems. Could you tell me what can cause this? /bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -DDEFAULT_CONFIG_FILE=\"/etc/squid/squid.conf\" -DDEFAULT_SQUID_DATA_DIR=\"/usr/share/squid\" -DDEFAULT_SQUID_CON

[squid-users] squid 5.3 crash

2021-12-27 Thread Dmitry Melekhov
Hello! Testing squid 5.3 on Ubuntu 20.04. Looks good for several weeks , but just got this: 2021/12/28 09:58:01 kid1| assertion failed: Read.cc:61: "Comm::IsConnOpen(conn)"     current master transaction: master28713185 After this squid ate almost 100% of cpu, then crashed, unfortunately

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 13:53, Antony Stone пишет: What's misleading? Sorry, I read it wrong. Thank you! ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 12:37, Amos Jeffries пишет: On 19/04/20 8:22 pm, Dmitry Melekhov wrote: 19.04.2020 12:18, TarotApprentice пишет: I am not sure if you have any contact with the Debian maintainers. I raised a bug with Debian in March asking for 4.10 to get promoted to buster-backports on the grounds

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 12:18, TarotApprentice пишет: I am not sure if you have any contact with the Debian maintainers. I raised a bug with Debian in March asking for 4.10 to get promoted to buster-backports on the grounds of security fixes. If we’re on the stable release (buster) we are stuck with 4.6 un

[squid-users] 4.10 crash

2020-02-25 Thread Dmitry Melekhov
Hello! see this in log, after this squid dies. 2020/02/26 11:17:47 kid1| UPGRADE WARNING: URL rewriter reponded with garbage ' 192.168.23.54/ABDRASHITOV-RR.p98a3.belkam.com abdrashitovrr CONNECT myip=192.168.22.254 myport=8090'. Future Squid wil l treat this as part of the URL. 2020/02/26 11:

Re: [squid-users] Is Squid 4.9 gone?

2019-12-20 Thread Dmitry Melekhov
20.12.2019 12:35, Amos Jeffries пишет: On 20/12/19 9:03 pm, netadmin wrote: At the address: http://www.squid-cache.org/Versions/ the latest version appears as 4.8 although I am running 4.9! What happened to version 4.9? I'm not entirely certain what happened there. I suspect it was just an ove

[squid-users] https://web.whatsapp.com/ , no qr code

2019-12-17 Thread Dmitry Melekhov
Hello! Users complains that they do not get qr code while using squid on https://web.whatsapp.com/ I checked this and got the same result with or without ssl-bump: 1576573551.547  0 192.168.22.229 NONE/000 0 NONE error:transaction-end-before-headers - HIER_NONE/- - is all I see in log

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-22 Thread Dmitry Melekhov
23.01.2019 8:53, Amos Jeffries пишет: On 23/01/19 5:40 pm, Dmitry Melekhov wrote: Thank you for explanation, it is easier for me to contact rejik developer and ask him to pass traffic if client address is "-" as he already did for fff...fff.  So, I'll inform him that such change

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-22 Thread Dmitry Melekhov
22.01.2019 19:51, Alex Rousskov пишет: It sounds like you misunderstood my questions. I will detail them below. I suspect that fff...fff comes from %>A (whether that %code comes from the default url_rewrite_extras in your configuration is unimportant). %>A is documented to to be a client FQDN.

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-21 Thread Dmitry Melekhov
21.01.2019 22:29, Alex Rousskov пишет: On 1/21/19 9:08 AM, Dmitry Melekhov wrote: Your Squid (or some helper) appears to be adding an "-/...GETmyip=-myport=0" suffix to the crt.sectigo.com URL, resulting in a 404 response from that server. Is there any reasons s

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-21 Thread Dmitry Melekhov
21.01.2019 14:30, Dmitry Melekhov пишет: Your Squid (or some helper) appears to be adding an "-/...GETmyip=-myport=0" suffix to the crt.sectigo.com URL, resulting in a 404 response from that server. Yes, I suspected this, there is no helper which can add this, as far as I kn

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-21 Thread Dmitry Melekhov
21.01.2019 8:39, Dmitry Melekhov пишет: 18.01.2019 21:08, Amos Jeffries пишет: On 19/01/19 4:31 am, Alex Rousskov wrote: On 1/18/19 4:35 AM, Dmitry Melekhov wrote: 17.01.2019 21:02, Alex Rousskov пишет: On 1/16/19 10:30 PM, Dmitry Melekhov wrote: 2019/01/17 09:18:21 kid1| ERROR

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-20 Thread Dmitry Melekhov
18.01.2019 21:08, Amos Jeffries пишет: On 19/01/19 4:31 am, Alex Rousskov wrote: On 1/18/19 4:35 AM, Dmitry Melekhov wrote: 17.01.2019 21:02, Alex Rousskov пишет: On 1/16/19 10:30 PM, Dmitry Melekhov wrote: 2019/01/17 09:18:21 kid1| ERROR: negotiating TLS on FD 55: error:14090086:SSL

Re: [squid-users] squid 4.5, can't download certificate?

2019-01-18 Thread Dmitry Melekhov
17.01.2019 21:02, Alex Rousskov пишет: On 1/16/19 10:30 PM, Dmitry Melekhov wrote: 2019/01/17 09:18:21 kid1| ERROR: negotiating TLS on FD 55: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0) In access log: 1547702300.945  0 192.168.22.229 NONE

[squid-users] squid 4.5, can't download certificate?

2019-01-16 Thread Dmitry Melekhov
Hello! While accessing site I can't access it through ssl bump. See in cache log: 2019/01/17 09:18:21 kid1| ERROR: negotiating TLS on FD 55: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0) In access log: 1547702300.945  0 192.168.22.229 NONE/

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-16 Thread Dmitry Melekhov
15.01.2019 21:33, Bruno de Paula Larini пишет: Em 15/01/2019 15:01, Dmitry Melekhov escreveu: 5 years, really, not very long period of time, if I'll be sure to not work here in 5 years then I'll use this ;-) , unfortunately I'm not :-( I don't need to replace certific

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread Dmitry Melekhov
il <mailto:elie...@ngtech.co.il> cid:image001.png@01D2675E.DCF360D0 *From:*squid-users *On Behalf Of *Dmitry Melekhov *Sent:* Tuesday, January 15, 2019 07:02 *To:* squid-us...@squid-cache.org *Subject:* [squid-users] ssl bump, CA certificate renewal, how to? Hello! According  to

[squid-users] ssl bump, CA certificate renewal, how to?

2019-01-14 Thread Dmitry Melekhov
Hello! According  to https://wiki.squid-cache.org/Features/DynamicSslCert recommended way to create certificate openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -extensions v3_ca -keyout myCA.pem -out myCA.pem we can create certificate for longer time. But sooner or later w

Re: [squid-users] squid 4.5 , ssl bump and c-icap on google sites

2019-01-10 Thread Dmitry Melekhov
Hello! Problem  was on c-icap side, my build had no br support. Thank you! 10.01.2019 14:44, Dmitry Melekhov пишет: Hello! We are testing ssl-bump with squid 4.5. Also we run c-icap with squid. What is strange here -  ssl-bump works for google domains if icap is disabled, but if it

[squid-users] squid 4.5 , ssl bump and c-icap on google sites

2019-01-10 Thread Dmitry Melekhov
Hello! We are testing ssl-bump with squid 4.5. Also we run c-icap with squid. What is strange here -  ssl-bump works for google domains if icap is disabled, but if it is on, then we get an error from c-icap: You tried to upload/download a file that contains the virus: *uncompress: Uncom

[squid-users] ssl , TAG_NONE/503 0 CONNECT

2016-11-15 Thread Dmitry Melekhov
Hello! User complained that he can't access https://es.ciur.ru/auth/login-page over squid. I tried, and all I see in log is: 1479206688.068 59865 192.168.22.229 TAG_NONE/503 0 CONNECT es.ciur.ru:443 - HIER_NONE/- - Direct connection from browser works OK. Squid 3.5.22, compiled from sour

Re: [squid-users] [squid-announce] Squid 3.5.15 is available

2016-02-23 Thread Dmitry Melekhov
Hello! After installing 3.5.15 on ubuntu 12.04 I get squid crash: 2016/02/24 10:07:23 kid1| assertion failed: FwdState.cc:447: "serverConnection() == conn" 3.5.14 had no such problem. Thank you! 24.02.2016 08:46, Amos Jeffries пишет: The Squid HTTP Proxy team is very pleased to announc

Re: [squid-users] https://www.waterfoxproject.org/, squid

2015-11-27 Thread Dmitry Melekhov
27.11.2015 16:28, Dmitry Melekhov пишет: Hello! User just complained he can't open https://www.waterfoxproject.org/ I tried to reproduce this and I can't too: 1448627177.123 79 192.168.22.229 TCP_TUNNEL/200 0 CONNECT www.waterfoxproject.org:443 dm HIER_DIRECT/104.28.27.103

[squid-users] https://www.waterfoxproject.org/, squid

2015-11-27 Thread Dmitry Melekhov
Hello! User just complained he can't open https://www.waterfoxproject.org/ I tried to reproduce this and I can't too: 1448627177.123 79 192.168.22.229 TCP_TUNNEL/200 0 CONNECT www.waterfoxproject.org:443 dm HIER_DIRECT/104.28.27.103 - squid 3.5.11 on ubuntu 12.04, compiled by me. Altho

[squid-users] 3.5.5 https problem

2015-06-02 Thread Dmitry Melekhov
Hello! Just tried to install 3.5.5 on production proxy, users complained about slow https connections, I see errors in cache.log like 2015/06/03 09:00:34 kid1| local=192.168.42.130:32922 remote=213.180.193.119:443 FD 964 flags=1: read/write failure: (32) Broken pipe 2015/06/03 09:00:46 kid1|

Re: [squid-users] Squid crashes with 3.5.1

2015-05-08 Thread Dmitry Melekhov
08.05.2015 13:35, Dmitry Melekhov пишет: 08.05.2015 11:29, Prashanth Prabhu пишет: As I pointed out in my earlier email, the crash occurs with c-icap connections I guess this is why my 3.5.4 crashes too, although had no chance to debug yet, I found info in log that there are no enough

Re: [squid-users] Squid crashes with 3.5.1

2015-05-08 Thread Dmitry Melekhov
08.05.2015 11:29, Prashanth Prabhu пишет: As I pointed out in my earlier email, the crash occurs with c-icap connections I guess this is why my 3.5.4 crashes too, although had no chance to debug yet, I found info in log that there are no enough redirectors, which never happend with 3.4.

[squid-users] squid 3.5.4 dies

2015-05-07 Thread Dmitry Melekhov
Hello! Several days ago I updated my self-compiled squid 3.4 to 3.5.4, server is ubuntu 12.04 x86-64. All I see in logs is 2015/05/08 09:13:47 kid1| local=192.168.42.130:32785 remote=74.125.205.132:443 FD 808 flags=1: read/write failure: (32) Broken pipe 2015/05/08 09:14:55 kid1| Set Current D

Re: [squid-users] 3.4.9 and tls 1.2

2014-11-10 Thread Dmitry Melekhov
10.11.2014 10:46, Dmitry Melekhov пишет: 07.11.2014 13:29, Dmitry Melekhov пишет: Hello! I just found that I have problems with using google maps , i.e. https://maps.google.com with firefox 33.0 ovr squid 3.4.9- it works extremely slow, sometimes street view can't be loaded and showed

Re: [squid-users] 3.4.9 and tls 1.2

2014-11-09 Thread Dmitry Melekhov
07.11.2014 13:29, Dmitry Melekhov пишет: Hello! I just found that I have problems with using google maps , i.e. https://maps.google.com with firefox 33.0 ovr squid 3.4.9- it works extremely slow, sometimes street view can't be loaded and showed black screen. This is wit de

[squid-users] 3.4.9 and tls 1.2

2014-11-07 Thread Dmitry Melekhov
Hello! I just found that I have problems with using google maps , i.e. https://maps.google.com with firefox 33.0 ovr squid 3.4.9- it works extremely slow, sometimes street view can't be loaded and showed black screen. This is wit default security.tls.version.max=3, i.e. tls 1.2 , but if I cha