Search squid archive

Re: SSL intercept in explicit mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I guess, your using wrong approach.

You trying to find ready-to-use solution for custom configuration.

At maximum, you can find some bricks for this. And anyway you should build your custom solution yourself.

Bricks is here: https://wiki.squid-cache.org :-)

14.03.2018 20:28, Danilo V пишет:
Thanks for the explanation.
Do you have any guide?

Em qua, 14 de mar de 2018 às 10:26, Matus UHLAR - fantomas <uhlar@xxxxxxxxxxx> escreveu:
On 13.03.18 14:44, Danilo V wrote:
>I mean SSL bump in explicit mode.
>So intercept is a essencial requirement for running SSL bump?

No, you asked for "explicit mode with ssl intercept" which I pointed out is
illogical.


>Em ter, 13 de mar de 2018 às 11:10, Matus UHLAR - fantomas <
>uhlar@xxxxxxxxxxx> escreveu:
>> On 13.03.18 13:44, Danilo V wrote:
>> >Is it possible/feasible to configure squid in explicit mode with ssl
>> >intercept?
>>
>> maybe you mean SSL bump in explicit mode?

It is possible to bump explicit proxy.

>> >Due to architecture of my network it is not possible to implement
>> >transparent proxy.
>>
>> excuse me?
>> by "transparent" people mean what we usually call "intercept".

>> >What would be the behavior of applications that dont support proxy - i.e.
>> >dont forward requests to proxy?
>>
>> they mest be intercepted.

"must" be intercepted. Since you said that it's not possible transparent (I
believe you have meant intercepting) proxy, it's apparently not possible to
handle applications that do not support proxy.

--
Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

-- 
"C++ seems like a language suitable for firing other people's legs."

*****************************
* C++20 : Bug to the future *
*****************************

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux