Re: [squid-users] Squid 3.5.17 SSL-Bump Step1

2016-05-16 Thread admin
Thanks for answer, Alex! Alex Rousskov писал 2016-05-17 00:24: > When access is prohibited via http_access deny, Squid needs to send an > "Access Denied" error response to the user (this is how http_access > works). To send that error to the user, Squid needs to establish a > secure connection w

Re: [squid-users] Squid 3.5.17 SSL-Bump Step1

2016-05-16 Thread Alex Rousskov
On 05/16/2016 04:47 AM, admin wrote: >>> acl blocked_https ssl::server_name "/etc/squid/urls/block-url" >>> https_port 3129 intercept ssl-bump options=ALL:NO_SSLv3:NO_SSLv2 >>> connection-auth=off cert=/etc/squid/squidCA.pem >>> acl step1 at_step SslBump1 >>> ssl_bump peek step1 >>> ssl_bump termi

Re: [squid-users] Squid 3.5.17 SSL-Bump Step1

2016-05-16 Thread admin
Amos Jeffries писал 2016-05-16 13:34: > Please upgrade to 3.5.19. Upgrade to 3.5.19 >> acl blocked_https ssl::server_name "/etc/squid/urls/block-url" >> https_port 3129 intercept ssl-bump options=ALL:NO_SSLv3:NO_SSLv2 >> connection-auth=off cert=/etc/squid/squidCA.pem >> acl step1 at_step SslBu

Re: [squid-users] Squid 3.5.17 SSL-Bump Step1

2016-05-16 Thread Amos Jeffries
On 16/05/2016 5:48 p.m., admin wrote: > Hi! > > Squid 3.5.17 with SSL, intercept. Please upgrade to 3.5.19. > > I use SSL-Bump only step1 that get SNI and terminate HTTPS sites by > domain name. The certificate's is not replaced ! The certificate is never replaced. Though if you dont know how

[squid-users] Squid 3.5.17 SSL-Bump Step1

2016-05-15 Thread admin
Hi! Squid 3.5.17 with SSL, intercept. I use SSL-Bump only step1 that get SNI and terminate HTTPS sites by domain name. The certificate's is not replaced ! acl blocked_https ssl::server_name "/etc/squid/urls/block-url" https_port 3129 intercept ssl-bump options=ALL:NO_SSLv3:NO_SSLv2 connecti