Re: [squid-users] ssl_bump for specific dstdomain

2015-03-27 Thread Daniel Greenwald
here is a python helper I wrote with help of previous posts. It takes sni info from squid and returns OK if the domain is in /etc/squid/domains_nobump.acl (I am not a coder..) Problem is it works good for intercepted browser traffic but doesn't work when a user tries to use an app on an eg android

Re: [squid-users] ssl_bump for specific dstdomain

2015-03-13 Thread Amos Jeffries
On 13/03/2015 6:39 p.m., Yuri Voinov wrote: > > > 13.03.15 2:37, Mukul Gandhi пишет: >> On Thu, Mar 12, 2015 at 11:04 AM, Yuri Voinov >> wrote: > >> You only have external helper (which is must wrote yourself) in >> 3.4.x. > > >>> Are there any examples that I can look at to implemented thi

Re: [squid-users] ssl_bump for specific dstdomain

2015-03-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 13.03.15 2:37, Mukul Gandhi пишет: > On Thu, Mar 12, 2015 at 11:04 AM, Yuri Voinov > wrote: > > You only have external helper (which is must wrote yourself) in > 3.4.x. > > >> Are there any examples that I can look at to implemented this >> ex

Re: [squid-users] ssl_bump for specific dstdomain

2015-03-12 Thread Mukul Gandhi
On Thu, Mar 12, 2015 at 11:04 AM, Yuri Voinov wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > You only have external helper (which is must wrote yourself) in 3.4.x. > > Are there any examples that I can look at to implemented this external helper for doing selective ssl_bumps. And wh

Re: [squid-users] ssl_bump for specific dstdomain

2015-03-12 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You only have external helper (which is must wrote yourself) in 3.4.x. Works with domains in ssl bump fully available at least 3.5.x 12.03.15 21:01, Mukul Gandhi пишет: > I am running squid 3.4.8 and am looking for solutions to ssl_bump > for specifi

[squid-users] ssl_bump for specific dstdomain

2015-03-12 Thread Mukul Gandhi
I am running squid 3.4.8 and am looking for solutions to ssl_bump for specific domains only. Going through the archives it is clear that it is not possible unless the reverse DNS points back to the domain that is to be ssl bumped. So then what is the solution to this problem. I just want to create