Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Amos Jeffries
On 15/05/2015 11:15 a.m., Casey Daniels wrote: > > > On 05/14/2015 12:37 AM, Amos Jeffries wrote: >>> Yes the second option, not the particular machine, but the FQDN >>> (i.e. ) >> >> # get TLS SNI details etc >> ssl_bump peek all >> >> # some get rejected >> acl b

Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Casey Daniels
On 05/14/2015 12:37 AM, Amos Jeffries wrote: Yes the second option, not the particular machine, but the FQDN (i.e. ) # get TLS SNI details etc ssl_bump peek all # some get rejected acl blocked ssl:server_name .example.com ssl_bump reject blocked # the res

Re: [squid-users] SSL Peak and Splice

2015-05-14 Thread Casey Daniels - mailinglist
> On May 14, 2015 at 12:37 AM Amos Jeffries wrote: > > > On 14/05/2015 10:47 a.m., Casey Daniels - mailinglist wrote: > >> On May 13, 2015 at 3:25 AM Amos Jeffries wrote: > >> > >> > >> On 13/05/2015 6:17 a.m., Casey Daniels wrote: > >>> Hi, > >>> I've been trying to figure out how to do some we

Re: [squid-users] SSL Peak and Splice

2015-05-13 Thread Amos Jeffries
On 14/05/2015 10:47 a.m., Casey Daniels - mailinglist wrote: >> On May 13, 2015 at 3:25 AM Amos Jeffries wrote: >> >> >> On 13/05/2015 6:17 a.m., Casey Daniels wrote: >>> Hi, >>> I've been trying to figure out how to do some web filtering on HTTPs, >>> with no really good options given the layout

Re: [squid-users] SSL Peak and Splice

2015-05-13 Thread Casey Daniels - mailinglist
> On May 13, 2015 at 3:25 AM Amos Jeffries wrote: > > > On 13/05/2015 6:17 a.m., Casey Daniels wrote: > > Hi, > > I've been trying to figure out how to do some web filtering on HTTPs, > > with no really good options given the layout I have. But then I just > > happened to see this feature for Squi

Re: [squid-users] SSL Peak and Splice

2015-05-13 Thread Amos Jeffries
On 13/05/2015 6:17 a.m., Casey Daniels wrote: > Hi, > I've been trying to figure out how to do some web filtering on HTTPs, > with no really good options given the layout I have. But then I just > happened to see this feature for Squid 3.5, and was wondering if I'm > understanding it correctly.

Re: [squid-users] SSL Peak and Splice

2015-05-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit 13.05.15 0:17, Casey Daniels пишет: > Hi, > I've been trying to figure out how to do some web filtering on HTTPs, with no really good options given the layout I have. But then

[squid-users] SSL Peak and Splice

2015-05-12 Thread Casey Daniels
Hi, I've been trying to figure out how to do some web filtering on HTTPs, with no really good options given the layout I have. But then I just happened to see this feature for Squid 3.5, and was wondering if I'm understanding it correctly. With the Peak and Splice feature, is it possible t