Re: [squid-users] squid callout sequence

2018-06-25 Thread Amos Jeffries
On 26/06/18 01:56, Gordon Hsiao wrote: > On 25/06/18 14:59, Gordon Hsiao wrote: > >      On 25/06/18 05:15, Gordon Hsiao wrote: > >     > at https://wiki.squid-cache.org/SquidFaq/OrderIsImportant I > noticed > >     > redirectors are way ahead of ssl-bump in the callout order, i

Re: [squid-users] squid callout sequence

2018-06-25 Thread Alex Rousskov
On 06/24/2018 11:15 AM, Gordon Hsiao wrote: > why is redirector run before ssl-bump? Adding to Amos' response: Please note that the redirector runs both before SslBump for CONNECT URLs and "after" SslBump for each of the decrypted HTTP requests inside the CONNECT tunnel (if the tunnel was bumped).

Re: [squid-users] squid callout sequence

2018-06-25 Thread Gordon Hsiao
> > On 25/06/18 14:59, Gordon Hsiao wrote: > > On 25/06/18 05:15, Gordon Hsiao wrote: > > > at https://wiki.squid-cache.org/SquidFaq/OrderIsImportant I > noticed > > > redirectors are way ahead of ssl-bump in the callout order, in a > > > https-ssl-bump case > > > > There is no

Re: [squid-users] squid callout sequence (Amos Jeffries)

2018-06-24 Thread Amos Jeffries
On 25/06/18 14:59, Gordon Hsiao wrote: >  On 25/06/18 05:15, Gordon Hsiao wrote: > > at https://wiki.squid-cache.org/SquidFaq/OrderIsImportant I noticed > > redirectors are way ahead of ssl-bump in the callout order, in a > > https-ssl-bump case > > There is not really any "htt

Re: [squid-users] squid callout sequence (Amos Jeffries)

2018-06-24 Thread Gordon Hsiao
> > On 25/06/18 05:15, Gordon Hsiao wrote: > > at https://wiki.squid-cache.org/SquidFaq/OrderIsImportant I noticed > > redirectors are way ahead of ssl-bump in the callout order, in a > > https-ssl-bump case > > There is not really any "https-ssl-bump" case. > > There is SSL-Bump (decrypting a TLS

Re: [squid-users] squid callout sequence

2018-06-24 Thread Amos Jeffries
On 25/06/18 05:15, Gordon Hsiao wrote: > at https://wiki.squid-cache.org/SquidFaq/OrderIsImportant I noticed > redirectors are way ahead of ssl-bump in the callout order, in a > https-ssl-bump case There is not really any "https-ssl-bump" case. There is SSL-Bump (decrypting a TLS stream - or not)