-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 17.09.2016 12:38, VB пишет: > Hi Yuri > > thx a lot for your links.. following the first one, what I did: > > 1. Create and sign the .pem certificate > > 2. Update my squid.conf with: > https_port 3130 ssl-bump \ > cert=/etc/squid/ssl/myCA.pem \ > generate-host-certificates=on dynamic_cert_mem_cache_size=4MB > > acl step1 at_step SslBump1 > > ssl_bump peek step1 > ssl_bump bump all > > but when I check the configuration (squid3 -k parse), I get: > > Processing: https_port 3130 ssl-bump cert=/etc/squid/ssl/myCA.pem > generate-host-certificates=on dynamic_cert_mem_cache_size=4MB > ERROR: 'https_port' requires --enable-ssl > Processing: acl step1 at_step SslBump1 > FATAL: Invalid ACL type 'at_step' > FATAL: Bungled /etc/squid3/squid.conf line 130: acl step1 at_step SslBump1 > > how can I overcome these errors on squid 3.4.8? Drop it out. This is antique version which not yet supported modern SSL Bump ACL's/directives. As Wiki, by the way, is written about the implementation of different versions of the SSL bump in different SQUID. You need to carefully read. > > Is my version of squid ssl-enabled? and if not.. how can I re-configure it? Yes, but SSL bump has different implementation in antique 3.4.x. > > > thx > Vincenzo > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/SQUID-3-4-8-on-RPi-3-tp4679556p4679562.html > Sent from the Squid - Users mailing list archive at Nabble.com. > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJX3RTvAAoJENNXIZxhPexGJX8IAJ+73xZ4W9R8fxZibyJ8y2lQ GbxfMmoN9DW49RSqjMXNpLSi+Pqs/dcR0dySS7QwtL3cI/EnMP99ZsNFjxT8RUgi KsEiz0khi9lqkCeoYAJuQCUSD767T6jVTIGBEyMEQNMXynLzJV8QdfHafFBOETOP pIEzF8dkEPshohyjTrMcHojRiXA2EjXYwfNDSJb5k31F18adJ2ojcb7T6FikaVr2 w9nOiltEVxjCAere95AuhsMp1iW5ploKYHMP/0u3Pqwm5TPqlLhsUL1V4xAsCD/m +iItqH+wQO3eLabmGcsPRctDAMOZsGdmXdZU1zpnQI6qgPagCtj7vi7JOZvZm9Y= =whNB -----END PGP SIGNATURE-----
Attachment:
0x613DEC46.asc
Description: application/pgp-keys
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
