Re: [squid-users] Squid 4.0.10 https intercept

2016-05-11 Thread Matus UHLAR - fantomas
On 12.05.16 08:00, admin wrote: openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout squidCA.pem -out squidCA.pem 1024-bit keys? too low for today... And export it: openssl x509 -in squidCA.pem -outform DER -out squidCA.crt I'm not sure if this doesn't only transfer the certifi

Re: [squid-users] Squid 4.0.10 https intercept

2016-05-11 Thread admin
I create cert: openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout squidCA.pem -out squidCA.pem And export it: openssl x509 -in squidCA.pem -outform DER -out squidCA.crt Wrong? Amos Jeffries писал 2016-05-11 17:18: On 11/05/2016 11:59 p.m., admin wrote: I just thought! I

Re: [squid-users] Squid 4.0.10 https intercept

2016-05-11 Thread Amos Jeffries
On 11/05/2016 6:35 p.m., Компания АйТи Крауд wrote: > hi! > > I use squid 4.0.10 in INTERCEPT mode. If I deny some users > (ip-addresses) with > > acl users_no_inet src "/etc/squid/ip-groups/no-inet" > http_access deny users_no_inet > > ERR_ACCESS_DENIED is displayed then go to HTTP. If go to HT

[squid-users] Squid 4.0.10 https intercept

2016-05-10 Thread Компания АйТи Крауд
hi! I use squid 4.0.10 in INTERCEPT mode. If I deny some users (ip-addresses) with acl users_no_inet src "/etc/squid/ip-groups/no-inet" http_access deny users_no_inet ERR_ACCESS_DENIED is displayed then go to HTTP. If go to HTTPS then first I see browser's NET::ERR_CERT_AUTHORITY_INVALID, an