Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-03-09 Thread Amos Jeffries
On 9/03/2016 6:49 a.m., Cohen-Rose, Adam wrote: > > We¹re planning to test how switching to an SMP config affects performance > ‹ will hopefully post our results when we see them. > Thanks. That would be good to see. > > One remaining puzzle: we see the latency creep upwards overnight when the

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-03-08 Thread Cohen-Rose, Adam
On 27/02/2016 01:54, "squid-users on behalf of Amos Jeffries" wrote: >On 27/02/2016 6:33 a.m., Cohen-Rose, Adam wrote: >> Amos, thanks so much for your help -- we're now seeing those requests >>get >> through when they were just being dropped before. >> >> We still have a couple of puzzles left.

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-02-26 Thread Amos Jeffries
On 27/02/2016 6:33 a.m., Cohen-Rose, Adam wrote: > Amos, thanks so much for your help -- we're now seeing those requests get > through when they were just being dropped before. > > We still have a couple of puzzles left... > > > Firstly, we're not seeing those cdn.teads.tv requests being marked

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-02-26 Thread Cohen-Rose, Adam
Amos, thanks so much for your help -- we're now seeing those requests get through when they were just being dropped before. We still have a couple of puzzles left... Firstly, we're not seeing those cdn.teads.tv requests being marked as spliced in our access log, despite including the %ssl::bump_

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-02-25 Thread Amos Jeffries
On 26/02/2016 12:38 a.m., Cohen-Rose, Adam wrote: > We¹re trying to use SSL bump to splice traffic from a CDN (cdn.teads.tv) > > The CDN server certificate uses Subject Alternative Names in its > certificate to identify the cdn.teads.tv domain rather than the Common > Name (which is set to aka.pro

[squid-users] SSL Bump matching Subject Alternative Names

2016-02-25 Thread Cohen-Rose, Adam
We¹re trying to use SSL bump to splice traffic from a CDN (cdn.teads.tv) The CDN server certificate uses Subject Alternative Names in its certificate to identify the cdn.teads.tv domain rather than the Common Name (which is set to aka.proceau.net). Can we use SSL bump to splice requests to cdn.te