Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-25 Thread Dave Blanchard
On Sat, 26 Feb 2022 02:06:23 +1300 Amos Jeffries wrote: > Agreed. Luckily we hear you (Alex and I are pretty much "them" these days). > Hopefully I don't sound unappreciative; I'm thankful for the work you've put into Squid, and the quick and useful responses you've given here on the list, wh

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-25 Thread Alex Rousskov
On 2/24/22 16:49, Dave Blanchard wrote: This tutorial situation is really out of control. Sadly, this is what can be expected to happen when the syntax is changed with every version. Now we're in a real mess. I hope the Squid developers will make up their minds on how they want the syntax to be

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-25 Thread Amos Jeffries
On 25/02/22 10:49, Dave Blanchard wrote: On Thu, 24 Feb 2022 15:07:53 -0500 Alex Rousskov wrote: What is the replacement for client-first? A "good" answer depends on what exactly you are trying to achieve; details matter. A "dumb" answer (i.e. a direct replacement without considering your tru

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-25 Thread Amos Jeffries
On 25/02/22 05:41, Grant Taylor wrote: On 2/24/22 9:08 AM, Alex Rousskov wrote: "more examples" is hardly the answer. I believe that "more examples" can be additional data that someone can derive information ~> knowledge from. Or said another way, it's a step in the proper direction. At

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Dave Blanchard
On Thu, 24 Feb 2022 15:07:53 -0500 Alex Rousskov wrote: > > What is the replacement for client-first? > > A "good" answer depends on what exactly you are trying to achieve; > details matter. A "dumb" answer (i.e. a direct replacement without > considering your true needs and Squid bugs) is: >

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Alex Rousskov
On 2/24/22 14:38, Dave Blanchard wrote: > ssl_bump client-first all What is the replacement for client-first? A "good" answer depends on what exactly you are trying to achieve; details matter. A "dumb" answer (i.e. a direct replacement without considering your true needs and Squid bugs) is:

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Dave Blanchard
On Thu, 24 Feb 2022 14:22:25 -0500 Alex Rousskov wrote: > [...] > > action is supposed to be doing. Legacy actions mentioned there, > including client-first, should be treated as unsupported, having unknown > side effects, and meant to be removed from Squid (yesterday). YMMV. What is the repla

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Alex Rousskov
On 2/24/22 13:24, Dave Blanchard wrote: ssl_bump client-first all ssl_bump stare all ssl_bump splice localhost Bugs notwithstanding, the above configuration is equivalent to the configuration below: ssl_bump client-first all The following wiki page can be used to find out what each ssl_

Re: [squid-users] Trying to set up SSL cache - solved! - correction

2022-02-24 Thread Dave Blanchard
On Thu, 24 Feb 2022 12:24:35 -0600 Dave Blanchard wrote: > (Note for any other confused noobs reading this: this configuration > apparently requires Squid to be compiled with --with openssl and > --with-ssl-crtd options on the 'configure' command line; or at least it did > in older versions, a

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Dave Blanchard
On Thu, 24 Feb 2022 11:08:48 -0500 Alex Rousskov wrote: > On 2/23/22 22:09, Dave Blanchard wrote: > > OK--I solved the problem by removing the "ssl_bump bump all" line. > > Works fine now. > > > Damn, this proxy is a TOTAL PAIN IN THE ASS!! to configure. It seems > > like 90% of the tutorials ou

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Alex Rousskov
On 2/23/22 22:09, Dave Blanchard wrote: OK--I solved the problem by removing the "ssl_bump bump all" line. Works fine now. Damn, this proxy is a TOTAL PAIN IN THE ASS!! to configure. It seems like 90% of the tutorials out there are junk, largely because things keep changing from version to ver

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Dave Blanchard
Hi Eliezer, this is on a custom Linux distro. I was using Traffic Server after the failed initial foray into Squid-land, but it also wasn't caching SSL, and it's even more poorly documented. Also, annoyingly, TS was updating its on-disk stat file every five seconds, slowly but steadily wearing o

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-24 Thread Matus UHLAR - fantomas
On 23.02.22 21:09, Dave Blanchard wrote: OK--I solved the problem by removing the "ssl_bump bump all" line. Works fine now. Damn, this proxy is a TOTAL PAIN IN THE ASS!! to configure. configuring proxy is very easy, bumping SSL is not. Since SSL is designed to encrypt traffic between ende -

Re: [squid-users] Trying to set up SSL cache - solved!

2022-02-23 Thread Eliezer Croitoru
Hey Dave, Lots of tutorials and documentation are out there but ... or out of sync or.. not good from 0. What OS are you running squid ontop? Eliezer * We are trying to give good examples. Eliezer Croitoru NgTech, Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Orig