What are the requirements for ssl::server_name to work with SNI (squid
3.5.12) ?
In principle, I want to do this (from squid.conf):
....
# get the public TLS metadata (includes SNI)
ssl_bump peek all
# block based on SNI matching
acl blocked ssl::server_name .example.com
ssl_bump terminate blocked
# tunnel (no decrypting) for everything else
ssl_bump splice all
.....
Few questions regarding the pre-requisites for this to work:
- It should not be necessary to install squids cert in the client, correct ?
- squid.conf: Anything missing in next line (cert for squid ) ?
http_port 3129 intercept ssl-bump
- Anything else required ?
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/about-sni-tp4676005.html
Sent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
