Yuri, Now I can see, I'm really doing something wrong, cause I can't see the FQDN at access.log What can be the possible problem that I can get just IP:PORT?
On 15-01-2016 15:23, Yuri Voinov wrote: > > > > 15.01.16 23:55, lucas castro пишет: > > Amos, Sorry for emailing right to you. > > ---------- Forwarded message ---------- > > From: lucas castro <lucascastrobor...@gmail.com> > > Date: Fri, Jan 15, 2016 at 2:54 PM > > Subject: Re: [squid-users] Squid https bump and google apps > > To: Amos Jeffries <squ...@treenet.co.nz> > > > > Amos, I'm already using squid-3.5.13 with sni, > > the problem is, google use the same certificate for youtube.com, > google.com > > and some others. > > Or Am I doing something wrong? > Yes. SSL Bump is _not_ main ACL tool. So, use SNI as geberal ACL is > bad idea. > > Right way is: > > - Using bump to make FQDN visible and, next > - Using general ACL to access control _or_ > - Using redirector to filter out URL's. > > > > On Fri, Jan 15, 2016 at 2:33 PM, Amos Jeffries > <squ...@treenet.co.nz> wrote: > > >> On 16/01/2016 3:35 a.m., Lucas Castro wrote: > >>> I've hard worked against google applications, > >>> The points is, google use the same certificate for a bunch of > different > >>> apps, > >>> like google.com, youtube.com, drive.google.com. > >>> I'd like to know if someone already got terminated youtube.com and > >>> keep working google.com and others services. > >> > >> It is possible. Using the Squid-3.5 peek-and-splice feature with SNI > >> detection. > >> > >> Amos > >> > >> _______________________________________________ > >> squid-users mailing list > >> squid-users@lists.squid-cache.org > >> http://lists.squid-cache.org/listinfo/squid-users > >> > > > > > > > _______________________________________________ > > squid-users mailing list > > squid-users@lists.squid-cache.org > > http://lists.squid-cache.org/listinfo/squid-users > > > > > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
