Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-24 Thread James Lay
On Fri, 2015-04-24 at 17:14 +0930, Michael Hendrie wrote: > > > > On 23 Apr 2015, at 9:22 pm, James Lay > > wrote: > > > > Michael, > > > > Could you post your entire config here if possible? Many of us > > continue to face challenges with ssl_bump and a working config would > > be great. T

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-24 Thread Michael Hendrie
> On 23 Apr 2015, at 9:22 pm, James Lay wrote: > > Michael, > > Could you post your entire config here if possible? Many of us continue to > face challenges with ssl_bump and a working config would be great. Thank you. > > James My ssl_bump configuration is contained in a separate conf fil

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-23 Thread James Lay
On Thu, 2015-04-23 at 17:18 +0930, Michael Hendrie wrote: > > > > On 23 Apr 2015, at 4:28 pm, Michael Hendrie > > wrote: > > > > > > > > > > > > > On 23 Apr 2015, at 4:21 pm, Amos Jeffries > > > wrote: > > > > > > On 23/04/2015 6:29 p.m., Michael Hendrie wrote: > > > > > > > Hi All > >

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-23 Thread Michael Hendrie
> On 23 Apr 2015, at 4:28 pm, Michael Hendrie wrote: > > >> On 23 Apr 2015, at 4:21 pm, Amos Jeffries wrote: >> >> On 23/04/2015 6:29 p.m., Michael Hendrie wrote: >>> Hi All >>> >>> I’ve been running squid-3.4.x in tproxy mode with ssl_bump >>> server-first for some time and has been working

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-22 Thread Michael Hendrie
> On 23 Apr 2015, at 4:21 pm, Amos Jeffries wrote: > > On 23/04/2015 6:29 p.m., Michael Hendrie wrote: >> Hi All >> >> I’ve been running squid-3.4.x in tproxy mode with ssl_bump >> server-first for some time and has been working great. >> >> I have just moved to 3.5.3 to use peek to overcome s

Re: [squid-users] ssl_bump peek in squid-3.5.3

2015-04-22 Thread Amos Jeffries
On 23/04/2015 6:29 p.m., Michael Hendrie wrote: > Hi All > > I’ve been running squid-3.4.x in tproxy mode with ssl_bump > server-first for some time and has been working great. > > I have just moved to 3.5.3 to use peek to overcome some issues with > sites that require SNI to serve up the correct