On 5/08/2016 2:13 p.m., JR Dalrymple wrote:
>
> For posterity's sake, here are the relevant parts of my working
> configuration:
>
> /etc/pf.conf:
> pass in proto tcp to any port 80 divert-to 127.0.0.1 port 3128
> pass in proto tcp to any port 443 divert-to 127.0.0.1 port 3129
>
> squid.conf:
>
On Thu, Aug 4, 2016 at 10:20 AM Alex Rousskov <
rouss...@measurement-factory.com> wrote:
> On 08/03/2016 08:45 PM, JR Dalrymple wrote:
>
> > To be brutally honest the whole concept is still a bit lost on me
>
> [rant]Admitting one's limitations is often the most difficult first
> step, but please
On 08/03/2016 08:45 PM, JR Dalrymple wrote:
> To be brutally honest the whole concept is still a bit lost on me
[rant]Admitting one's limitations is often the most difficult first
step, but please do not stop here! Suggestions for where to go next: Ask
good questions, do not accept answers you do
On Wed, Aug 3, 2016 at 9:14 AM Alex Rousskov <
rouss...@measurement-factory.com> wrote:
> On 08/02/2016 09:53 PM, Amos Jeffries wrote:
>
> > To do bumping with server certificate mimic you need the 'bump' action
> > to occur at #3.
>
Thanks for the clarification. I probably read that 100 times in
On 08/02/2016 09:53 PM, Amos Jeffries wrote:
> To do bumping with server certificate mimic you need the 'bump' action
> to occur at #3.
>
> Like:
> acl step1 at_step SslBump1
> acl step2 at_step SslBump2
> ssl_bump peek step1
> ssl_bump stare step2
> ssl_bump bump all
>
> (or maybe stare an
On 2/08/2016 1:30 p.m., JR Dalrymple wrote:
> I have a freshly installed Squid from source on a likewise freshly
> installed OpenBSD system. Attempting to replace an aging stub Squid on
> Linux with transparent with SSLBump. I think I have everything set up
> pretty skookup, the symptom is it just
I have a freshly installed Squid from source on a likewise freshly
installed OpenBSD system. Attempting to replace an aging stub Squid on
Linux with transparent with SSLBump. I think I have everything set up
pretty skookup, the symptom is it just isn't working. When I browse to an
https website I g