Re: [squid-users] Call for adaptation after sni peeked

t and may causes issues in some cases I don't know about? Thanks, Jatin On Thu., 24 Oct. 2019, 07:55 Alex Rousskov, < rouss...@measurement-factory.com> wrote: > On 10/23/19 3:37 PM, Jatin Bhasin wrote: > > > This question is related to ssl decryption and ecap adaptation call.

[squid-users] Call for adaptation after sni peeked

Hi All, This question is related to ssl decryption and ecap adaptation call. When the ssl connection starts then before it even extracts sni squid sends fakeConnect which comes to ecap as well. I am using peek in step 1 and after fakeConnect squid extracts the sni, but at this point squid does no

[squid-users] Call for adaptation after sni peeked

to ecap adapter and this time we have sni as well? I needed this functionality as I want to make the decision using sni whether to bump the connection or not. Thanks, Jatin Bhasin ___ squid-users mailing list squid-users@lists.squid-cache.org h

Re: [squid-users] Squid SNI at Step 2

27 Oct 2015 1:52 am, "Amos Jeffries" wrote: > On 27/10/2015 1:34 a.m., Jatin Bhasin wrote: > > Hello, > > > > I am running squid 3.5.10 for bumping transparent SSL connections To > > achieve this I am using following squid configuration for SSL Bumping. >

Re: [squid-users] Squid SNI at Step 2

FAKE CONNECT until we splice at step 2. Do you know that why squid does not generate FAKE CONNECT request for bump and peek actions at step2 ? Thanks, Jatin On Tue, Oct 27, 2015 at 4:20 AM, Alex Rousskov wrote: > On 10/26/2015 06:34 AM, Jatin Bhasin wrote: > >> I am running squi

[squid-users] Squid SNI at Step 2

Hello, I am running squid 3.5.10 for bumping transparent SSL connections To achieve this I am using following squid configuration for SSL Bumping. acl nobumpSites ssl::server_name "/etc/squid/allowed_SSL_sites.txt" ssl_bump peek step1 all ssl_bump peek step2 nobumpSites ssl_bump bump step3 nobump

[squid-users] Squid SSL Bump Certificates

Hello, I am using squid 3.4.9 with SSL Bump feature. I am using the following https_port directive. https_port 8090 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=16MB cert=Certficate key=Key I am unable to find out where all the certificates are being stored. I was w

[squid-users] SslBump Squid - Dropbox client does not work

Hello, I am using squid 3.4.9 and the Dropbox client does not work with SSLBump feature of squid. Dropbox client gives a message that it cannot make a secure connection. Does anyone know fix or workaround or this issue? Thanks, Jatin ___ squid-users ma

Re: [squid-users] blockVirgin Works for CONNECT but Custom Response does not work

ONNECT and GET. > > So, would my eCap adapter has to do something else to let squid know > that the annotations its providing is a note. > > Thanks, > Jatin > > > On Sat, Oct 11, 2014 at 2:18 AM, Alex Rousskov > wrote: >> On

Re: [squid-users] blockVirgin Works for CONNECT but Custom Response does not work

adapter are not travelling to squid for both CONNECT and GET. So, would my eCap adapter has to do something else to let squid know that the annotations its providing is a note. Thanks, Jatin On Sat, Oct 11, 2014 at 2:18 AM, Alex Rousskov wrote: > On 10/09/2014 11:57 PM, Jati

Re: [squid-users] blockVirgin Works for CONNECT but Custom Response does not work

:50:55.341 kid1| HttpHeader.cc(442) clean: cleaning hdr: 0x7fff1d656f80 owner: 3 2014/10/10 22:50:55.341 kid1| HttpHeader.cc(1531) ~HttpHeaderEntry: destroying entry 0x1722650: 'X-Virus-ID: yes' On Fri, Oct 10, 2014 at 4:57 PM, Jatin Bhasin wrote: > Hi Alex, > > I used the annotation mechanism

Re: [squid-users] blockVirgin Works for CONNECT but Custom Response does not work

ng. Thanks, Jatin On Sat, Aug 23, 2014 at 10:24 AM, Alex Rousskov wrote: > On 08/21/2014 07:06 PM, Jatin Bhasin wrote: > >> So, can somebody suggest me if there is a way to pass a flag to squid >> from ecap adapter to decrypt a site regardless of what ACL says. For >>