Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Amos Jeffries
On 31/03/2017 2:55 p.m., Eliezer Croitoru wrote: > As far my understanding goes squid doesn't have this function yet. > Maybe if you will put haproxy(not sure) infront of squid you might be able to > achieve your goal. > It depends on exactly what is wanted as to how they are configured. But Sq

Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Amos Jeffries
On 31/03/2017 9:39 p.m., Juande wrote: > Half and half. I need a way to client certificate authorize the requests from > my analyzer software that does not support certificate authentication, but > does support using a proxy. > > So I need that squid provides the certificate for all requests to a

Re: [squid-users] HTTPS reverse proxy: SSL Certficate verification failed

2017-04-02 Thread Amos Jeffries
On 1/04/2017 4:42 a.m., Eric Veiras Galisson wrote: > On Fri, Mar 31, 2017 at 4:44 AM, Amos Jeffries wrote: > >> On 31/03/2017 4:01 a.m., Eric Veiras Galisson wrote: >>> Hello, >>> >>> I want to setup Squid as a HTTPS reverse proxy for several of our >> websites, >>> but I have a certificate verif

Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Eliezer Croitoru
For Incoming and outgoing connections? IE I want the only the users which their certificates are in a file will be able to use the proxy? The other side is that squid as a client will posses and use a client side certificate. Which of the above is possible on latest stable(3.5)? Thanks, Eliezer

Re: [squid-users] MAXHTTPORTS CentOS 6

2017-04-02 Thread Eliezer Croitoru
Well I can patch the RPM I am publishing with such a things but I will need Amos Or Alex describe to me the possible effects such a patch and in what limits we are talking about. Amos, Alex: What do you think about including a patch to squid stable release? What is the right limit? Would it be w

Re: [squid-users] Load balance on two internet connections

2017-04-02 Thread Eliezer Croitoru
+1 fro the OS iptables level method and an addition: http://wiki.squid-cache.org/EliezerCroitoru/Drafts/MwanLB And consider to make the load balancing a bit "static" per something or your users will have troubles accessing services which tends to notice if requests are coming from the same src ip

Re: [squid-users] MAXHTTPORTS CentOS 6

2017-04-02 Thread Matus UHLAR - fantomas
On 02.04.17 12:01, Eliezer Croitoru wrote: Well I can patch the RPM I am publishing with such a things but I will need Amos Or Alex describe to me the possible effects such a patch and in what limits we are talking about. Amos, Alex: What do you think about including a patch to squid stable r

Re: [squid-users] MAXHTTPORTS CentOS 6

2017-04-02 Thread Alex Rousskov
On 04/02/2017 03:01 AM, Eliezer Croitoru wrote: > What do you think about including a patch to squid stable release? A high-quality patch removing the limit should be welcomed IMO. However, implementing this change correctly is difficult, and there are much bigger problems to solve if somebody ha