Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-21 Thread Ahmad, Sarfaraz
quid-users@lists.squid-cache.org Subject: Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time On 21/06/18 00:25, Ahmad, Sarfaraz wrote: > I found the answer to my problem. The SNI and Subject CN were > different in my case and I was not peeking at step2 (meanin

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
error and splice by ssl::server_name at the same time On 21/06/18 00:25, Ahmad, Sarfaraz wrote: > I found the answer to my problem. The SNI and Subject CN were > different in my case and I was not peeking at step2 (meaning not > looking at the server certificate) that is why my

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Amos Jeffries
On 21/06/18 00:25, Ahmad, Sarfaraz wrote: > I found the answer to my problem. The SNI and Subject CN were different > in my case and I was not peeking at step2 (meaning not looking at the > server certificate) that is why my ACLs were ineffective. > Ah, excellent. Does that mean your problem is n

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
I found the answer to my problem. The SNI and Subject CN were different in my case and I was not peeking at step2 (meaning not looking at the server certificate) that is why my ACLs were ineffective. Regards, Sarfaraz From: Ahmad, Sarfaraz Sent: Wednesday, June 20, 2018 3:25 PM To: 'squid-users

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
Forgot to add. Remote IP addresses are not expected to remain constant. So I cannot build ACLs that way. So ssl::server_name is the only other hope. From: Ahmad, Sarfaraz Sent: Wednesday, June 20, 2018 2:34 PM To: 'squid-users@lists.squid-cache.org' Subject: Ignore SSL error and splice by ssl::s