[squid-users] Squid ssl_bump always makes outbound connection

2018-08-25 Thread Eric Lackey
Using squid-4.2-1.el7.x86_64 I'm looking at ways to optimize Squid when using ssl_bump. We use the peek & splice approach now and it works pretty well. While running some tests, I noticed that Squid always makes an outbound connection to the remote server regardless of when I terminate the conn

[squid-users] Peek and Splice - Termination Log

2017-09-22 Thread Eric Lackey
Hello, we’re beginning to enable the Peek and Splice feature on Squid 3.5. Our ssl_bump configuration looks like below where we’re validating the request matches a domain in our allowed_sites file and then terminating the SSL connection if it does not. This is all working well except for the f

[squid-users] HTTPS Filtering by Certificate Subject Name

2014-10-17 Thread Eric Lackey
It looks like this question has come up before, but I'm hoping to get some further details on it. I've used a couple of firewalls (Watchguard & Fortigate) that allow me to do a level of HTTPS site filtering without decryption. I believe that it works by requesting and examining the certificate sen