On 04/06/2018 07:59 AM, Amos Jeffries wrote:
> On 07/04/18 00:48, Peter Viskup wrote:
>> # splice at step3 for other TLS connections
>> note acl test_splice_http test_s test_ssl
>> ssl_bump splice sslstep3 test_s test_ssl
>>
>> logformat ... acl=%{acl}note ...
> Since the 'note ...' directive is
> ONLY evaluated right at logging time it may show the wrong thing if the
> ACL state changes between the initial directive (ssl_bump) evaluation
> and the logging at the end of the transaction.
Yes, and the correct solution to those problems is the new
annotate_transaction and/or annotate_client ACLs. They can be used to
reliably remember and log ACL-based decisions.
Alex.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
