Search squid archive

Re: Strange Squid SSL Interception Behavior

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 26/08/20 11:03 pm, Mathew Brown wrote:
> Thank you Alex + Amos :) You've really helped clarify things. I had a
> final question regarding this setup. Does this configuration only look
> at the client side part of the SNI request or also the server
> certificate. If it only looks at the client-side, how would I tell it to
> look at the server response as well? Thanks.


SSL-Bump step 1 decides whether to look at the client handshake details.

Step 2 decides whether to look at the server handshake details.

Step 3 decides what to do given all available info from both handshakes.

The process is all described at
<https://wiki.squid-cache.org/Features/SslPeekAndSplice>


Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux