Re: [squid-users] Some questions about ssl_bump.

2015-11-17 Thread Alex Rousskov
On 11/17/2015 02:25 PM, Bruce Markey wrote: > Looking at the squid docs for peek and splice > ( http://wiki.squid-cache.org/Features/SslPeekAndSplice ). > > # Do no harm: > # Splice indeterminate traffic. > ssl_bump splice serverIsBank > ssl_bump bump haveServerName > ssl_bump peek all > ssl_bu

Re: [squid-users] Some questions about ssl_bump.

2015-11-17 Thread Bruce Markey
Amos, Looking at the squid docs for peek and splice ( http://wiki.squid-cache.org/Features/SslPeekAndSplice ). # Do no harm:# Splice indeterminate traffic.ssl_bump splice serverIsBankssl_bump bump haveServerNamessl_bump peek allssl_bump splice all So my understanding of this. splice just passe

Re: [squid-users] Some questions about ssl_bump.

2015-11-17 Thread Amos Jeffries
On 18/11/2015 9:24 a.m., Bruce Markey wrote: > Amos, > > I knew something wasn't right. > > Ok then I'm going to start there. I had a heck of a time getting > squidguard to even work due to its reliance on old berkely db packages, I'd > be happy to see it go. > > So that being said. I'm going t

Re: [squid-users] Some questions about ssl_bump.

2015-11-17 Thread Bruce Markey
Amos, I knew something wasn't right. Ok then I'm going to start there. I had a heck of a time getting squidguard to even work due to its reliance on old berkely db packages, I'd be happy to see it go. So that being said. I'm going to lose squidguard. Upgrade squid to 3.5. I haven't even looke

Re: [squid-users] Some questions about ssl_bump.

2015-11-17 Thread Amos Jeffries
On 18/11/2015 7:46 a.m., Bruce Markey wrote: > So I "think" I have squid working with https, but to be honest I'm not > really sure. Hopefully someone can point me in the right direction. > > We're using squid as a transparent NON caching proxy. It's basically only > there to give us insight int

[squid-users] Some questions about ssl_bump.

2015-11-17 Thread Bruce Markey
So I "think" I have squid working with https, but to be honest I'm not really sure. Hopefully someone can point me in the right direction. We're using squid as a transparent NON caching proxy. It's basically only there to give us insight into what everyone is using the web for. From there we'll