Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-24 Thread James Lay
On Fri, 2015-04-24 at 17:14 +0930, Michael Hendrie wrote: > > > > On 23 Apr 2015, at 9:22 pm, James Lay > > wrote: > > > > Michael, > > > > Could you post your entire config here if possible? Many of us > > continue to face challenges with ssl_bump and a working config would > > be great. T

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-24 Thread Michael Hendrie
> On 23 Apr 2015, at 9:22 pm, James Lay wrote: > > Michael, > > Could you post your entire config here if possible? Many of us continue to > face challenges with ssl_bump and a working config would be great. Thank you. > > James My ssl_bump configuration is contained in a separate conf fil

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-23 Thread James Lay
On Thu, 2015-04-23 at 17:18 +0930, Michael Hendrie wrote: > > > > On 23 Apr 2015, at 4:28 pm, Michael Hendrie > > wrote: > > > > > > > > > > > > > On 23 Apr 2015, at 4:21 pm, Amos Jeffries > > > wrote: > > > > > > On 23/04/2015 6:29 p.m., Michael Hendrie wrote: > > > > > > > Hi All > >

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-23 Thread Michael Hendrie
> On 23 Apr 2015, at 4:28 pm, Michael Hendrie wrote: > > >> On 23 Apr 2015, at 4:21 pm, Amos Jeffries wrote: >> >> On 23/04/2015 6:29 p.m., Michael Hendrie wrote: >>> Hi All >>> >>> I’ve been running squid-3.4.x in tproxy mode with ssl_bump >>> server-first for some time and has been working

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-22 Thread Michael Hendrie
> On 23 Apr 2015, at 4:21 pm, Amos Jeffries wrote: > > On 23/04/2015 6:29 p.m., Michael Hendrie wrote: >> Hi All >> >> I’ve been running squid-3.4.x in tproxy mode with ssl_bump >> server-first for some time and has been working great. >> >> I have just moved to 3.5.3 to use peek to overcome s

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-22 Thread Amos Jeffries
On 23/04/2015 6:29 p.m., Michael Hendrie wrote: > Hi All > > I’ve been running squid-3.4.x in tproxy mode with ssl_bump > server-first for some time and has been working great. > > I have just moved to 3.5.3 to use peek to overcome some issues with > sites that require SNI to serve up the correct

[squid-users] ssl_bump peek in squid-3.5.3

2015-04-22 Thread Michael Hendrie
Hi All I’ve been running squid-3.4.x in tproxy mode with ssl_bump server-first for some time and has been working great. I have just moved to 3.5.3 to use peek to overcome some issues with sites that require SNI to serve up the correct certificate. In most cases this is work well however I se