Re: [squid-users] header_access ssl multiple cache_peers? Redirect http to https

2017-02-18 Thread Amos Jeffries
On 18/02/2017 3:27 a.m., chiasa.men wrote: > hello > there a two cache_peers with ssl enabled webservers. Obviously for both the > private keys are available. > For http_port squid can use header_access to filter headers. > Can squid make use of the known private keys in order to filter the heade

Re: [squid-users] squid-avira-update-cache

2017-02-18 Thread Amos Jeffries
On 18/02/2017 9:31 a.m., Alex Rousskov wrote: > On 02/17/2017 01:27 PM, Heiler Bemerguy wrote: >> Em 17/02/2017 17:05, Alex Rousskov escreveu: >>> On 02/17/2017 12:31 PM, Heiler Bemerguy wrote: I've noticed this: 2017/02/17 16:28:05.632 kid4| ctx: enter level 0: 'http://persona

[squid-users] squid & handling/propagating certificat revocations...?

2017-02-18 Thread L A Walsh
How does squid 'normally' handle security revocations, like from this test page?: https://revoked.grc.com/ Or how 'should' it be handling it (i.e. is my setup more broken than most? ;^) ) Or, when squid fetches the page, does it do any checking before sending it to the user? Or, does it pass

Re: [squid-users] squid & handling/propagating certificat revocations...?

2017-02-18 Thread Alex Rousskov
On 02/18/2017 03:31 PM, L A Walsh wrote: > How does squid 'normally' handle security revocations, In the simplest case without SslBump, Squid does not see the server certificate at all and, hence, cannot validate it. Squid simply tunnels opaque bytes, including certificate bytes, from the server t