Search squid archive

Re: ssl_bump with cache_peer problem: Handshake fail after Client Hello.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 6/07/2015 9:30 p.m., adam900710 wrote:
> 
> Here is some of my experiments:
> 1) Remove "never_direct"
> Then ssl_bump works as expected, but all traffic doesn't goes through
> the SOCKS5 proxy. So a lot of sites I can't access.
> 
> 2) Use local 8118 proxy
> That works fine without any problem, but SSL_dump is needed...
> So just prove privoxy are working.
> 
> Any clue?

> Also, If I disable "ssl_bump" at http_port line, squid works without
> any problem just as a forwarder.
> But that makes no sense anyway.

Makes perfect sense. Would you like anybody to be able to decrypt your
HTTPS traffic and send it as plain-text wherever they want?

Squid does not permit that. All inbound encrypted traffic must one way
or another leave upstream only by encrypted channels.

Amos

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux