On 10/22/21 17:24, Alex Rousskov wrote:
I do not know much about TeamViewer,
...
You do not need SslBump and https_port for this.
AFAIK you *cannot* use SslBump, as TeamViewer pinpoints certificates.
If someone can prove me wrong, I'd be curious to know how they manage this.
bye
av.
sslbump can be used in peek+splice and peek+bump modes.
Depending on what Squid finds in the peek (e.g. a teamviewer FQDN) Squid can
decide to splice (not interfere) the connection.
Below is an example.
Marcus
# TLS/SSL bumping definitions
acl tls_s1_connect at_step SslBump1
# define acl
On 10/23/21 18:56, Marcus Kool wrote:
sslbump can be used in peek+splice and peek+bump modes.
Sure.
Depending on what Squid finds in the peek (e.g. a teamviewer FQDN) Squid
can decide to splice (not interfere) the connection.
I know.
Perhaps I wasn't clear.
What I was saying is that