On 13/01/2023 10:47 am, andre.bolinhas wrote:
So is a bug for 500 or a bad configuration?
I have also tried this setup and seams to "fix" the tcp_tunnel/500
...
Basically the changes that I made is on peek step changing from
ssl_bump peek ssl_step1
To
acl NotPeek any-of Group26
You should
k step changing from
ssl_bump peek ssl_step1
To
acl NotPeek any-of Group26
ssl_bump peek !NotPeek
This is a good idea?
-Mensagem original-
De: squid-users Em Nome De Amos
Jeffries
Enviada: 12 de janeiro de 2023 21:22
Para: squid-users@lists.squid-cache.org
Assunto: Re: [squid-users] SSLBUMP
:!DSS:!MD5:!EXP:!DES:!PSK:!SRP:!RC4:!IDEA:!SEED:!aNULL:!eNULL
flags=DONT_VERIFY_PEER
sslproxy_cert_error allow all
on_unsupported_protocol tunnel all
-Mensagem original-
De: squid-users Em Nome De andre.bolinhas
Enviada: 12 de janeiro de 2023 21:03
Assunto: Re: [squid-users] SSLBUMP fo
m original-
De: squid-users Em Nome De
andre.bolin...@articatech.com
Enviada: 12 de janeiro de 2023 21:03
Para: 'Amos Jeffries' ; squid-users@lists.squid-cache.org
Assunto: Re: [squid-users] SSLBUMP for specific domains
Hi Amos
Thansk for your quick reply, I have done it as examp
inal-
De: squid-users Em Nome De Amos
Jeffries
Enviada: 12 de janeiro de 2023 19:13
Para: squid-users@lists.squid-cache.org
Assunto: Re: [squid-users] SSLBUMP for specific domains
On 13/01/2023 6:37 am, andre.bolinhas wrote:
>
> Hi
>
> It’s possible configure squid to intercept ss
On 13/01/2023 6:37 am, andre.bolinhas wrote:
Hi
It’s possible configure squid to intercept ssl traffic just for a
group of domain and leave the all of rest out of ssl interceptation?
Yes, with one caveat: that Squid is able to identify the domain/server
to make the decision.
If so, can
