Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 25.06.2016 23:47, C. L. Martinez пишет: > On Sun 26.Jun'16 at 5:22:31 +1200, Amos Jeffries wrote: >> On 26/06/2016 4:46 a.m., C. L. Martinez wrote: >>> On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: -BEGIN PGP SIGNED MESSAG

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
On Sun 26.Jun'16 at 5:22:31 +1200, Amos Jeffries wrote: > On 26/06/2016 4:46 a.m., C. L. Martinez wrote: > > On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: > >> > >> -BEGIN PGP SIGNED MESSAGE- > >> Hash: SHA256 > >> > >> Use search. > >> > >> Some days agi I've played around with

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 25.06.2016 23:22, Amos Jeffries пишет: > On 26/06/2016 4:46 a.m., C. L. Martinez wrote: >> On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: >>> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA256 >>> >>> Use search. >>> >>> Some days a

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Amos Jeffries
On 26/06/2016 4:46 a.m., C. L. Martinez wrote: > On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: >> >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> Use search. >> >> Some days agi I've played around with ECDSA certs and drop it due to >> extremal incompatibility with clients. H

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Use search. > > Some days agi I've played around with ECDSA certs and drop it due to > extremal incompatibility with clients. Here was this thread. > > Is this the thread: http://

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Use search. Some days agi I've played around with ECDSA certs and drop it due to extremal incompatibility with clients. Here was this thread. 25.06.2016 22:10, C. L. Martinez пишет: > Hi all, > > I have some problems with my squid config when I

[squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
Hi all, I have some problems with my squid config when I use certificates generated with my internal CA. First, my ssl-bump config: acl DiscoverSNIHost at_step SslBump1 acl NoSSLIntercept ssl::server_name_regex -i "/etc/squid/acls/domains.nobump" ssl_bump peek DiscoverSNIHost ssl_bump splice No