Re: [squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

Hey Alex, Can you point me to the rough location in code where the certs are sent to the client. I tried with TLS 1.2 with openssl s_client and it returned the certs the same. Thanks, Greg > On Jan 13, 2021, at 8:44 PM, Alex Rousskov > wrote: > > On 1/13/21 9:47 PM, Greg Hulands

Re: [squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

Hi Alex, Thanks for the help. Comments inline. > On Jan 13, 2021, at 2:23 PM, Alex Rousskov > wrote: > > On 1/13/21 4:33 PM, Greg Hulands wrote: > >> I am setting up squid 5.0.3 and during testing I have found some >> websites fail to have their certificate

[squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

com/ghulands/f89b49bf180bfac86c98c46c4260f1eb <https://gist.github.com/ghulands/f89b49bf180bfac86c98c46c4260f1eb> My ssl-bump config is ssl_bump peek step1 ssl_bump bump all Does anyone have any suggestions or insight on what might the problem be? Thanks, Greg $ squid --version Squid Cache: Version

[squid-users] SSL bump config or possible code issue

ething is taking precedence over calloutContext->error. But even if it was not, because the request is actually being processed it would allow a security hole where an attacker could map a private internal network of https services based on the time it takes

Re: [squid-users] Remote configuration management software for managing Squid proxies?

On 26 February 2015 at 11:57, Yuri Voinov wrote: > :))) Why is this funny? :/ I'd like to make one step ahead. Even though I'm noob, that doesn't mean I'm happy to manage 10+ Squid boxes manually, and I'd be happy if there was a tool easing that, that plays well with our many differen

[squid-users] Remote configuration management software for managing Squid proxies?

ces and show their status - Can list and install packages - Preferably has a GUI, even better if there's one for Windows Any tips and experience with some related software? Best regards, Greg ___ squid-users mailing list squid-users@lists.squid-ca

Re: [squid-users] Tracking down cache MISSes

On 25 February 2015 at 10:48, Yuri Voinov wrote: > > 25.02.15 16:46, Greg пишет: > >> On 25 February 2015 at 03:30, Amos Jeffries wrote: >>> >>> On 2015-02-25 05:31, Greg wrote: >>>>>> >>>>>> so, there's my proxy prob

Re: [squid-users] Tracking down cache MISSes

On 25 February 2015 at 03:30, Amos Jeffries wrote: > On 2015-02-25 05:31, Greg wrote: >>>> so, there's my proxy problem I couldn't crack, even after spending >>>> 2+ days tweaking-googling-debugging. :( >>>> >>>> The problem: my _new_ S

Re: [squid-users] Tracking down cache MISSes

nfig updates for 5 years. This is just we need, and it has worked well for Ubuntu 10 (squid 2.7.STABLE7-1ubuntu12.6 is still being supported until this April!), but it has EOL now and we have to upgrade. I'd very much like to stay inside this safe zone with our servers. I u

Re: [squid-users] Need better debug_options values to track down cache MISSes

> From: Pavel Kazlenka > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Need better debug_options values to track > down cache MISSes > Message-ID: <54ec9147.6070...@measurement-factory.com> > Content-Type: text/plain; charset="utf-8&

Re: [squid-users] Need better debug_options values to track down cache MISSes

://pastebin.com/Be4RqVLq , http://pastebin.com/yVDeuyQp - Example that gets cached on the old server but is a MISS on the new one - http://pastebin.com/VvTU6ieR vs http://pastebin.com/ysKJwbmh - Old server firewall settings - http://pastebin.com/v688dDMU - New server fi

[squid-users] Need better debug_options values to track down cache MISSes

2: StoreEntry is NULL - MISS", even for pages I see in the disk cache -- I'd like to know why does it occur, probably need some more good debug_options. I don't understand the code too well, don't know which direction to take. Please suggest some more good debug_options to cont