Re: [squid-users] Using subordinate CA for SSL Bump

2015-12-17 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This looks like. Root CA doesn't send. Subordinate CA uses as signer for mimicked. All and any clients got security alert. 16.12.15 1:38, Alex Rousskov пишет: > On 12/14/2015 04:48 PM, Marcus Kool wrote: >> On 12/14/2015 09:16 PM, Amos Jeffrie

Re: [squid-users] Configure proxy to multiple physical hosts through one Domain Name.

2015-12-17 Thread Eliezer Croitoru
Hey, Basically what you want is called "reverse proxy". Squid has this feature and you can see couple examples at the wiki: http://wiki.squid-cache.org/FrontPage?action=fullsearch&context=180&value=reverse&titlesearch=Titles This list is indeed squid users list but I will let you know that squid

Re: [squid-users] Time for cache synchronization between siblings

2015-12-17 Thread Sreenath BH
Hi, Thanks for the detailed response. I really appreciate it. Unfortunately the load balancer we use is not a squid load balancer and for now I will have to use HTCP. Please take a look at the following lines from access.log of one of the three squid servers. 1450351827.534 0 1

Re: [squid-users] Using subordinate CA for SSL Bump

2015-12-17 Thread Alex Rousskov
On 12/17/2015 03:12 AM, Yuri Voinov wrote: > This looks like. Root CA doesn't send. Subordinate CA uses as signer for > mimicked. All and any clients got security alert. There may still be some terminology misunderstanding here because not sending the root certificate is the right thing to do in

Re: [squid-users] Using subordinate CA for SSL Bump

2015-12-17 Thread Walter H.
On 14.12.2015 22:26, Yuri Voinov wrote: Hi all. Does anybody can tell me - is it possible to use subordinate secondary CA in squid for SSL Bumping purpose? this is possible; I had this for several months this way; I.e., we have self-signed primary CA for issue subordinate CA, subordinate CA

Re: [squid-users] Time for cache synchronization between siblings

2015-12-17 Thread Amos Jeffries
On 18/12/2015 1:21 a.m., Sreenath BH wrote: > Hi, > > Thanks for the detailed response. I really appreciate it. > > Unfortunately the load balancer we use is not a squid load balancer > and for now I will have to use HTCP. > > Please take a look at the following lines from access.log of one of >

Re: [squid-users] Using subordinate CA for SSL Bump

2015-12-17 Thread Walter H.
On 17.12.2015 18:01, Alex Rousskov wrote: On 12/17/2015 03:12 AM, Yuri Voinov wrote: This looks like. Root CA doesn't send. Subordinate CA uses as signer for mimicked. All and any clients got security alert. There may still be some terminology misunderstanding here because not sending the root