Hello Yuri, Luckily the same topic was just discussed on our forum – please see if this can help https://groups.google.com/d/msg/quintolabs-content-security-for-squid-proxy/GKIV3FpYSBE/9IET-4hg_tEJ
It describes the iptables settings for successful SSL bump exclusions for Dropbox clients / Google Drive / iTunes (bypassing SSL Bump because of SSL Pinning). Best regards, Raf From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Rafael Akchurin Sent: Tuesday, December 30, 2014 4:23 PM To: Yuri Voinov; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect Only exclusion from SSL Bump as far as I know. raf ________________________________ From: Yuri Voinov <yvoi...@gmail.com<mailto:yvoi...@gmail.com>> Sent: Tuesday, December 30, 2014 3:19 PM To: Rafael Akchurin; squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org> Subject: Re: [squid-users] Squid 3 SSL bump: Google drive application could not connect -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 May be. Does workaround exists? 30.12.2014 20:09, Rafael Akchurin ?????: > SSL Pinning? (I know Dropbox does this) > > my two cents only :) > > Raf > > ________________________________________ > From: squid-users <mailto:squid-users-boun...@lists.squid-cache.org> <squid-users-boun...@lists.squid-cache.org><mailto:squid-users-boun...@lists.squid-cache.org> on behalf of Yuri Voinov <mailto:yvoi...@gmail.com> <yvoi...@gmail.com><mailto:yvoi...@gmail.com> > Sent: Tuesday, December 30, 2014 2:12 PM > To: <mailto:squid-users@lists.squid-cache.org> squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org> > Subject: [squid-users] Squid 3 SSL bump: Google drive application could not > connect > > Hi gents, > > I found strange issue. > > Squid 3.4.10. Intercept. HTTPS bumping. All works fine. All configs correct. > > Whenever all web https sites works perfectly - especially in Chrome, > most cloud clients works like charm (SpiderOak is!), Google Drive client > application (PC) could not work. > Note: Web Google Docs works. Web Google drive works. > > Note: Google support info - even I if pass dozen Google URL's without > bump - cannot help. It doesn't work when server-first bumping is on and > works othervise. > > So, the Serious Question is: Why? :) > > Any idea? > > > > > _______________________________________________ > squid-users mailing list > <mailto:squid-users@lists.squid-cache.org> squid-users@lists.squid-cache.org<mailto:squid-users@lists.squid-cache.org> > <http://lists.squid-cache.org/listinfo/squid-users> http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJUorRuAAoJENNXIZxhPexGRPEH/0Vlh/kZINRlo3IaDe/9UYSW M0oaXQemB2Wg/wvNMdZ8SA3F4dUJUuHgS/y7FXcCgP/KgWnudsoJ7oPiHEVNPzt3 L8K7rNPy3d/c/+baXilh4/xErp/mAOKU/mLBqd0GQYQ2N7bAsWpsWqt7/dTGxWkU kLVgFJr9JblxVdABAZ7JTooye3bLskdrAB/865vZOyQcveozW6d4TKZwaEGFrq/d b/3Mki4T6YLMG248jVN+43W2us6Z598geDLn8aJN+zb/s6TBEzxy1d5tUROM4a2A 1rE7B92o+9leZi+JdQAGX4l7Um1WVmrnih52w+Pxz/PR/k7Hz+fCcQBlUtsqvMk= =Lf+I -----END PGP SIGNATURE-----
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
