[squid-users] Fetch missing certificate feature of Squid_v4

2018-08-20 Thread Christof Gerber
I am wondering how to verify the feature "Fetch missing certificate" which was added to Squid v4. https://github.com/squid-cache/squid/commit/55369ae649646901d3038c63217386174d01eb7b I tried to trigger the feature by requesting some domains via squid which lack the intermediate certificate (e.g. w

Re: [squid-users] Fetch missing certificate feature of Squid_v4

2018-08-20 Thread Amos Jeffries
On 20/08/18 9:10 PM, Christof Gerber wrote: > I am wondering how to verify the feature "Fetch missing certificate" > which was added to Squid v4. > https://github.com/squid-cache/squid/commit/55369ae649646901d3038c63217386174d01eb7b > > I tried to trigger the feature by requesting some domains via

Re: [squid-users] Have issue with "https_port ssl-bump intercept"

2018-08-20 Thread pius
Thanks for the reply. That really helped. I had an ACL for network and that blocked the https traffic coming through. It has been a journey settling it up. But without you guys help I think I was not able to do it. Thanks for all help. Much appreciated. Few settings that help with debugging and

[squid-users] NTLM Authentication / Centos 7

2018-08-20 Thread Jon Cuthbert
On a new installation, I can not get the ntlm_auth working correctly: Squid - v 3.5.20 2018/08/20 17:00:27| helperOpenServers: Starting 1/5 'ntlm_auth' processes 2018/08/20 17:00:27| WARNING: basicauthenticator #Hlpr243 exited 2018/08/20 17:00:27| Too few basicauthenticator processes are running (

[squid-users] https requests the squid rejects the connection

2018-08-20 Thread Marcelo J. Martinez
hello, sorry but I do not write in english I had to translate it with google. I have a problem with the proxy server, install it with the default parameters with the following modifications: acl SSL_ports port 443 21 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Matus UHLAR - fantomas
On 20.08.18 14:20, Marcelo J. Martinez wrote: I have a problem with the proxy server, install it with the default parameters with the following modifications: # Deny requests to unknown ports http_access deny! Safe_ports this has to be: http_access deny !Safe_ports # Deny CONNECT to othe

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Marcelo J. Martinez
sorry, it's a mistake to copy and paste. the configuration is: # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Antony Stone
On Monday 20 August 2018 at 19:20:52, Marcelo J. Martinez wrote: > hello, > sorry but I do not write in english I had to translate it with google. > > I have a problem with the proxy server, install it with the default > parameters with the following modifications: 1. Which version of Squid do y

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Marcelo J. Martinez
1. Squid's version is 3.5.27 2. That this run on an Ubuntu 18.04.1 LTS (GNU / Linux 4.15.0-32-generic x86_64) 3. Configure in browser to use proxy port 3128 http and use the same configuration for https, ftp and SOCKS. - Mensaje original - De: "Antony Stone" Para: "Posting address" E

Re: [squid-users] NTLM Authentication / Centos 7

2018-08-20 Thread Amos Jeffries
On 21/08/18 4:15 AM, Jon Cuthbert wrote: > On a new installation, I can not get the ntlm_auth working correctly: > Squid - v 3.5.20  > > 2018/08/20 17:00:27| helperOpenServers: Starting 1/5 'ntlm_auth' processes > 2018/08/20 17:00:27| WARNING: basicauthenticator #Hlpr243 exited > 2018/08/20 17:00:

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Amos Jeffries
On 21/08/18 6:45 AM, Marcelo J. Martinez wrote: > sorry, it's a mistake to copy and paste. > the configuration is: > > # Only allow cachemgr access from localhost > http_access allow manager localhost > http_access deny manager > # Deny requests to unknown ports > http_access deny !Safe_ports > #

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Marcelo J. Martinez
access.log: 1534782486.761 0 10.10.1.101 TCP_DENIED/403 3917 CONNECT aus5.mozilla.org:443 - HIER_NONE/- text/html 1534782486.767 0 10.10.1.101 TCP_DENIED/403 3926 CONNECT redirector.gvt1.com:443 - HIER_NONE/- text/html 1534782486.768 0 10.10.1.101 TCP_DENIED/403 4221 GET http://c

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Amos Jeffries
On 21/08/18 8:19 AM, Marcelo J. Martinez wrote: > access.log: > > 1534782486.761 0 10.10.1.101 TCP_DENIED/403 3917 CONNECT > aus5.mozilla.org:443 - HIER_NONE/- text/html > 1534782486.767 0 10.10.1.101 TCP_DENIED/403 3926 CONNECT > redirector.gvt1.com:443 - HIER_NONE/- text/html > 15347

Re: [squid-users] https requests the squid rejects the connection

2018-08-20 Thread Amos Jeffries
On 21/08/18 8:19 AM, Marcelo J. Martinez wrote: > access.log: > 1534783486.506 0 10.10.1.101 TCP_DENIED/403 4169 GET > http://smbserver2:3128/squid-internal-static/icons/SN.png - HIER_NONE/- > text/html Note that this port 3128 for showing the Squid error page details is itself being blocke

Re: [squid-users] NTLM Authentication / Centos 7

2018-08-20 Thread Amos Jeffries
On 21/08/18 7:54 AM, Amos Jeffries wrote: > > # ... things which don't require login credentials > http_access deny login Oops. That should be "deny !login" > # ... things which depend on credentials > Amos ___ squid-users mailing list squid-users