-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 17.09.2016 12:38, VB пишет: > Hi Yuri > > thx a lot for your links.. following the first one, what I did: > > 1. Create and sign the .pem certificate > > 2. Update my squid.conf with: > https_port 3130 ssl-bump \ > cert=/etc/squid/ssl/myCA.pem \ > generate-host-certificates=on dynamic_cert_mem_cache_size=4MB > > acl step1 at_step SslBump1 > > ssl_bump peek step1 > ssl_bump bump all > > but when I check the configuration (squid3 -k parse), I get: > > Processing: https_port 3130 ssl-bump cert=/etc/squid/ssl/myCA.pem > generate-host-certificates=on dynamic_cert_mem_cache_size=4MB > ERROR: 'https_port' requires --enable-ssl > Processing: acl step1 at_step SslBump1 > FATAL: Invalid ACL type 'at_step' > FATAL: Bungled /etc/squid3/squid.conf line 130: acl step1 at_step SslBump1 > > how can I overcome these errors on squid 3.4.8? Drop it out. This is antique version which not yet supported modern SSL Bump ACL's/directives. > > Is my version of squid ssl-enabled? and if not.. how can I re-configure it? Yes, but SSL bump has different implementation in antique 3.4.x. > > > thx > Vincenzo > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/SQUID-3-4-8-on-RPi-3-tp4679556p4679562.html > Sent from the Squid - Users mailing list archive at Nabble.com. > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJX3RPoAAoJENNXIZxhPexGPXAIAI0dBkbBSZCYksa74JxVqNVY mXySn5w8BSQ9lXE1SDvNrekjTEN69Zgt3hJ6B5hlaXLVOPqa9QoRtrQY0LrfCuA+ Amh9Oqp+KfRJi10EAXXq1r6iIfuSFQ+4Wup/bg0PzPbPlvPl3qTqXuVxcH9kBuHe 0RKGuVDty5EE4BaLmzW8PCBF9hcY5RNWe3XhiphlPJAbtDSJk0a6VZe4tirxRGwB RLqponHgZ8enFCpjJocMBgCPfvYTFQvDYZ0mShN3HULYn6pB+Yc3FFulRX+NSvd/ u9YGXk0mY27Qv2IlguFGARufRnEqaCXav08+11XW/PJIdUkgcIGK5BHDLe+zFv0= =hHYX -----END PGP SIGNATURE-----
Attachment:
0x613DEC46.asc
Description: application/pgp-keys
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
