Hi Amos, Does this mean if I use sslbump, I can't have parent proxy. Regards, Ming -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: January-26-11 5:53 PM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: sslbump and always_direct On Wed, 26 Jan 2011 20:18:08 +0000, Ming Fu wrote: > Hi, > > > The wiki sample http://wiki.squid-cache.org/Features/SslBump suggested > addi= ng "always_direct allow all". > > This will prevent me from having a peer proxy when sslbump is configured. > > Wonder what is the reason behind the setting. With ssl-bump Squid will hit bugs when un-wrapping back to a CONNECT request or may send raw unencrypted https://... URLs to the peers. Amos
