I'm not sure if this can solve the problem, but, in my squid.conf I deny youtube to cache using "cache_deny"
2016-03-02 3:04 GMT-03:00 Yuri Voinov <yvoinov@xxxxxxxxx>:
02.03.16 2:34, Baselsayeh пишет:
Yuri Voinov wroteSeems correct.
it works now<http://squid-web-proxy-cache.1019090.n4.nabble.com/attachment/4676357/0/0x613DEC46.asc>-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Did you read
http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit
this first?
Look once more to examples.
02.03.16 2:15, Baselsayeh пишет:
Yuri Voinov wrotea bit
Seems to some else misconfiguration in peek-n-splice section.
Where is your at_step peek definition?
02.03.16 2:08, Baselsayeh пишет:
Yuri Voinov wrote
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Aha.
You must know, that stare is client initiated handshake. This is
specific option, which is useless in most usecases (IMHO).
More reliable configuration is peek then bump.
Did you client (android) contains your cache CA public key?
_______________________________________________
squid-users mailing list
squid-users@.squid-cache
http://lists.squid-cache.org/listinfo/squid-users
0x613DEC46.asc (2K)
little bit<http://pastebin.com/j97k953r>now new error after changing config to peek then bump
access.log : http://pastebin.com/j97k953r
<http://pastebin.com/FDuHtCDD>cache.log : http://pastebin.com/2jF6nqeM
<http://pastebin.com/2jF6nqeM>
squid.config : http://pastebin.com/FDuHtCDD
and now youtube works but when i enter a video it loads for a
http://squid-web-proxy-cache.1019090.n4.nabble.com/Youtube-wont-work-on-squid-tp4676349p4676359.htmlthen says
"Connection to the server lost"
"tap to retry"
i tried more than 10 videos and none of them worked
--
View this message in context:
<http://squid-web-proxy-cache.1019090.n4.nabble.com/attachment/4676360/0/0x613DEC46.asc>squid-users@.squid-cacheSent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@.squid-cache
http://lists.squid-cache.org/listinfo/squid-users
0x613DEC46.asc (2K)
<http://squid-web-proxy-cache.1019090.n4.nabble.com/attachment/4676362/0/0x613DEC46.asc>
what do you mean?http://squid-web-proxy-cache.1019090.n4.nabble.com/Youtube-wont-work-on-squid-tp4676349p4676361.html
this?
http_port 3428 intercept
https_port 3429 intercept ssl-bump generate-host-certificates=on
dynamic_cert_mem_cache_size=200MB cert=/home/basel/squid/rootCAcert.pem
key=/home/basel/squid/rootCAkey.key
ssl_bump peek all
ssl_bump bump all
sslcrtd_program /lib/squid/ssl_crtd -s /var/cache/squid/ssl_db/ -M 200MB
sslcrtd_children 3 startup=1 idle=1
--
View this message in context:
Sent from the Squid - Users mailing list archive at Nabble.com.squid-users@.squid-cache
_______________________________________________
squid-users mailing list
http://lists.squid-cache.org/listinfo/squid-users-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJW1f9dAAoJENNXIZxhPexGcSkH/0sykbFIcW+et28E9VUiT6r6
ShcfP89O15nYTFJgsrTGslTv5EX1+fwproBljHLT1VSkZg8Ftl/RcrthP0z4F/F8
Pe83prBkD/EuvpElP9OuKL+CE3IhSKTDya0+VTUUmskr/CFpl51R+tL7Va6BLJc/
MWC3X+B7Ywkujaf3Y1iuxw3pG7bawRHQVYaIhKnCIRwJ3MrfUS4WX31r5bhNplUj
fTq4owWWycq0RjzlJ6gait8p4lRTOts1IBQ+dzzVxuPo+3CdPWd6UXSusWJ7NQUT
Tj9w878S09xkVoGDRsEHB21MgjnbB0GQ7AmjTyPTQvS5tm/msAPMtpsgCS5oz9I=
=WmcI
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@.squid-cache
http://lists.squid-cache.org/listinfo/squid-users
0x613DEC46.asc (2K)
http_port 3428 intercept
https_port 3429 intercept ssl-bump generate-host-certificates=on
dynamic_cert_mem_cache_size=200MB cert=/home/basel/squid/rootCAcert.pem
key=/home/basel/squid/rootCAkey.key
acl step1 at_step SslBump1
acl step2 at_step SslBump2
acl step3 at_step SslBump3
ssl_bump peek step1
ssl_bump bump all
sslcrtd_program /lib/squid/ssl_crtd -s /var/cache/squid/ssl_db/ -M 200MB
sslcrtd_children 3 startup=1 idle=1
is it correct?
Not at all cases. By default openssl can take it own CA bundle installed with it.
do i need sslproxy_cafile?
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Youtube-wont-work-on-squid-tp4676349p4676364.html
Sent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
--
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
