Re: [squid-users] SSLBUMP certificate verify failed

2016-01-17 Thread Roman Gelfand
squidCA.der squid.conf http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/local/ssl_cert/squidCA.pem On Sun, Jan 17, 2016 at 1:58 PM, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > No. > > 18.01.1

[squid-users] SSLBUMP certificate verify failed

2016-01-17 Thread Roman Gelfand
I am getting an error, below, in a cache.log. How can I identify the request associated with this error? It doesn't appear to be an issue with client-to-proxy. It seems like a problem with proxy-to-remote_server. Error negotiating SSL on FD 43: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIF

[squid-users] SSLBUMP Issue

2016-01-10 Thread Roman Gelfand
I am getting the following error. Would anyone know the reason? Error negotiating SSL connection on FD 37: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number My sslbump config is http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/usr/loca

[squid-users] Running configuration

2016-01-09 Thread Roman Gelfand
I accidentally deleted the squid.conf while squid has been running. The squid is still running. Is there a way to retrieve a running configuration? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squi

[squid-users] cache_peer configuration

2014-12-18 Thread Roman Gelfand
My goal is to accept ssl requests/connections from wan, decrypt them and forward the decrypted requests/connection to apache web server over port 80. Below, is my configuration to accomplish that. However, it appears that the requests/connections from squid to apache web server are encrypted. I

[squid-users] SQUID_ERR_SSL_HANDSHAKE

2014-12-17 Thread Roman Gelfand
*The squid version is 3.4.5. The server certificate is sslv3 generated by openssl. Not quite sure as to what the problem is.* *Failed to establish a secure connection to 192.168.3.108* The system returned: (71) Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE) Handshake with SSL server fail

[squid-users] Multiple SSL Domains on Reverse Proxy

2014-11-30 Thread Roman Gelfand
Is it possible to listen on port 443 for requests for multiple domains ie... www.xyz.com, www.mno.com, etc...? If yes, could you point me to sample config. Thanks in advance ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squ