[squid-users] Using CA signed certificate for SSL bump

2018-09-05 Thread Arshad Ansari
Hi All, I have setup squid 4.2 for forward proxy and caching. It is working fine when I am using self-signed certificate for SSL bump. However, our security requirement is to use only CA signed certificate and not self-signed certificate. I have tried various options like using Https and

Re: [squid-users] Using CA signed certificate for SSL bump

2018-09-05 Thread Antony Stone
On Wednesday 05 September 2018 at 09:02:45, Arshad Ansari wrote: > Hi All, > > I have setup squid 4.2 for forward proxy and caching. It is working fine > when I am using self-signed certificate for SSL bump. Good. Well done. > However, our security requirement is to use only CA signed certific

Re: [squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-05 Thread Ahmad, Sarfaraz
Tested with Squid-4.2 and ended with same results. How do we proceed here ? -Original Message- From: Alex Rousskov Sent: Tuesday, September 4, 2018 9:14 PM To: Ahmad, Sarfaraz ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid fails to bump where there are too many D

Re: [squid-users] Squid intermittently not sending host header to peer

2018-09-05 Thread Michael Thomas
Thanks Amos, I updated both servers to Squid 4.2 and the issue persisted. I understand what you're saying about the configuration and lack of security - in production, this will be in place. I was removed to try and resolve the issue we encountered. After adding the additional configuration to de

Re: [squid-users] Using CA signed certificate for SSL bump

2018-09-05 Thread Flashdown
Hey, How should that work? That would require an ca to sign your selfsigney ca to be able to issue valid public certs for all websites. If that would be possible, then the whole concept of ssl security would be worth nothing. You cant create valid certificates for such websites. You can only is

Re: [squid-users] Using CA signed certificate for SSL bump

2018-09-05 Thread Alex Crow
You can set up your own internal CA. You then have the CA key (so can generate certificates for any domain) and install the CA public certificate on all client machines. That CA can be anything from a local CA on the squid box, using a central VM with something like XCA installed, all the way

[squid-users] Radius and Squid transparent mode

2018-09-05 Thread Colle Christophe
Hello, I am working on a WiFi project: People connect to the network using a Radius server, then use the Internet using Squid in transparent mode. I would like to improve this system by adding the identifier of the person logged in the Squid logs (It's easier to do research, it saves time!). I

Re: [squid-users] avocent protocol support in squid

2018-09-05 Thread Amos Jeffries
On 5/09/18 6:14 PM, Hariharan Sethuraman wrote: > Hi, > > Wanted to know if we support avocent protocol in squid - if yes, which > directive we should check? Couldnt get much details from google. What is this protocol? There seems to only be hardware products by a company of that name - not even

Re: [squid-users] Radius and Squid transparent mode

2018-09-05 Thread Amos Jeffries
On 6/09/18 1:16 AM, Colle Christophe wrote: > Hello, > > I am working on a WiFi project: People connect to the network using a > Radius server, then use the Internet using Squid in transparent mode. > > I would like to improve this system by adding the identifier of the > person logged in the Squ

Re: [squid-users] Squid fails to bump where there are too many DNS names in SAN field

2018-09-05 Thread Alex Rousskov
On 09/05/2018 02:37 AM, Ahmad, Sarfaraz wrote: > Tested with Squid-4.2 and ended with same results. > How do we proceed here ? At the risk of sounding like a broken record, I can only repeat my earlier recommendation to file a bug report (assuming you cannot fix the bug). Your overall options are

[squid-users] Squid and DNS

2018-09-05 Thread Julian Perconti
Hi all, "I discovered" that if I use more than one *local* dns server/resolver, when I use squid HTTPS, there are some problems accesing to the web. For example: I have a squid with TLS support in server "B"; the gateway and resolver of the server "B" is server "A" and the server "A" has bind in

[squid-users] content adaptation using squid

2018-09-05 Thread Yosef Meltser
Hi, We have managed to create a proxy server using a squid in an intercept mode. Now we would like to make a content adaptation, for example to show an alert every time the user entered a website. We are not familiar with this domain, so we are looking for the easiest way to inject java script