Search squid archive

Re: squid 4.0.19 error with certificates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Byte hit is caching related. This is most important functionality for me.


01.05.2017 15:16, marco пишет:
Thanks. What means drop byte hit? I just wanna bump a few sites, and pass the rest. Why isnt that a good solution? Is it bad form
performance?
It disables HTTPS caching completely.

On May 1, 2017 at 9:13 GMT, Yuri <yvoinov@xxxxxxxxx> wrote:

Sorry, this is not solution. All https spliced means for me catastrophyc drop byte hit. I knew about this wrkarnd from the beginning. But this is unacceptable.

At maximum this is temporary workaround.


01.05.2017 15:10, marco пишет:
solution:
all monitoredsites, m1 m2 are bumped correctly
all others are spliced
squid4

this works great. just contact me for questions.


acl monitoredSites ssl::server_name_regex -i (phncdn|ypncdn|heise|rncdn|youporn)

acl m1 ssl::server_name_regex -i \.youporn\.com

acl m2 ssl::server_name_regex -i \.rncdn7\.com

ssl_bump stare m1
ssl_bump stare m2
ssl_bump stare monitoredSites
ssl_bump peek !m1 !m2 !monitoredSites
#ssl_bump splice step3 !m1 !m2
ssl_bump bump m1
ssl_bump bump m2
ssl_bump bump monitoredSites
ssl_bump splice !m1 !m2 !monitoredSites

On April 30, 2017 at 13:35 GMT, Yuri Voinov <yvoinov@xxxxxxxxx> wrote:

Check this. It seems this is the issue:

http://bugs.squid-cache.org/show_bug.cgi?id=4711


30.04.2017 12:02, snable snable пишет:
hello

i am using squid on a external box.
i forward all traffic from my openwrt router to it
htto works fine
https with youtube app doesnt work
i get:

 Error negotiating SSL connection on FD 73: error:14094416
:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown (1/0)

errors

other sites work well so far

i heard that squid4 auto downloads intermediate certificates.. maybe thats the issue?

i workarounded this with a white list of sites that work. but i wanna rollout this for all sites. (also see my other question)

thanks!



_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

--
Bugs to the Future




_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux