Re: [squid-users] Squid 4 ssl_bump issue

2019-04-11 Thread Davide Belloni
Ok, here we are: https://bugs.squid-cache.org/show_bug.cgi?id=4938 On Thu, 11 Apr 2019 at 07:27, Amos Jeffries wrote: > On 10/04/19 9:14 pm, Davide Belloni wrote: > > Hi, > > in the request scope of cache log I cannot find nothing that suggest to > > a configuration issue > > > > It may be relat

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-10 Thread Amos Jeffries
On 10/04/19 9:14 pm, Davide Belloni wrote: > Hi, > in the request scope of cache log I cannot find nothing that suggest to > a configuration issue > It may be related to the session cache being set to '0'. The log shows the server context being created, then destroyed just before the code produce

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-10 Thread Davide Belloni
Hi, in the request scope of cache log I cannot find nothing that suggest to a configuration issue Maybe is the time to open a bug? On Tue, 9 Apr 2019 at 09:58, Davide Belloni wrote: > Hi, > here the cache log in debug mode with the single request (previous email > was blocked because the atachm

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-09 Thread Davide Belloni
Hi, here the cache log in debug mode with the single request (previous email was blocked because the atachment was too big) Thanks On Mon, 8 Apr 2019 at 08:26, Davide Belloni wrote: > Hi, > here the cache log in debug mode with the single request > > Thanks > > On Fri, 5 Apr 2019 at 09:06, Amos

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-05 Thread Amos Jeffries
On 5/04/19 7:54 pm, Davide Belloni wrote: > Hi, > the setup is exactly what you suggested but still the ERROR shows up. > Here the startup sequence about context creation: > Okay that looked reasonable. > > If you want I can attach all the cache log with startup and one request > with error >

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Davide Belloni
Hi, the setup is exactly what you suggested but still the ERROR shows up. Here the startup sequence about context creation: 2019/04/05 06:29:48.050| Initializing https:// proxy context 2019/04/05 06:29:48.050| 24,8| SBuf.cc(38) SBuf: SBuf950 created from id SBuf110 2019/04/05 06:29:48.050| 24,8| T

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Amos Jeffries
On 5/04/19 12:37 am, Davide Belloni wrote: > Hi, > this is the certificate that I'm using at the moment: > AFAICS the pieces Squid-4 needs for your config and checks for are all there. Are the pieces correctly ordered in the .pem file? key first, then CA cert. > > On Thu, 4 Apr 2019 at 12:57,

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Davide Belloni
Hi, this is the certificate that I'm using at the moment: Certificate: > Data: > Version: 3 (0x2) > Serial Number: > a3:49:9a:ee:ac:75:66:da > Signature Algorithm: sha256WithRSAEncryption > Issuer: CN = nobody > Validity > Not Before:

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Davide Belloni
Hi, thanks very much for all the advices! About the action to generate the certificate I've followed the squid wiki, that doesn't modify (if I remember correctly) openssl conf to create it . Do you have some link to a good howto about that? Thanjs Il gio 4 apr 2019, 12:35 Amos Jeffries ha scrit

Re: [squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Amos Jeffries
On 4/04/19 10:11 pm, Davide Belloni wrote: > Hi, > I've a problem in Ubuntu 18.04.2 with Squid 4.6 compiled with OpenSSL > 1.1 about ssl_bump. The same configuration works in Squid 3.5 and > OpenSSL 1.0 > > Here the relevant conf : > > ... > http_port 3128 ssl-bump options=ALL:NO_SSLv3 co

[squid-users] Squid 4 ssl_bump issue

2019-04-04 Thread Davide Belloni
Hi, I've a problem in Ubuntu 18.04.2 with Squid 4.6 compiled with OpenSSL 1.1 about ssl_bump. The same configuration works in Squid 3.5 and OpenSSL 1.0 Here the relevant conf : ... http_port 3128 ssl-bump options=ALL:NO_SSLv3 connection-auth=off generate-host-certificates=off cert=/etc/squid/squi