Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 25.06.2016 23:47, C. L. Martinez пишет: > On Sun 26.Jun'16 at 5:22:31 +1200, Amos Jeffries wrote: >> On 26/06/2016 4:46 a.m., C. L. Martinez wrote: >>> On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: -BEGIN PGP SIGNED MESSAG

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
On Sun 26.Jun'16 at 5:22:31 +1200, Amos Jeffries wrote: > On 26/06/2016 4:46 a.m., C. L. Martinez wrote: > > On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: > >> > >> -BEGIN PGP SIGNED MESSAGE- > >> Hash: SHA256 > >> > >> Use search. > >> > >> Some days agi I've played around with

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 25.06.2016 23:22, Amos Jeffries пишет: > On 26/06/2016 4:46 a.m., C. L. Martinez wrote: >> On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: >>> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA256 >>> >>> Use search. >>> >>> Some days a

Re: [squid-users] Skype Issues

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 25.06.2016 23:09, Amos Jeffries пишет: > On 26/06/2016 4:32 a.m., Yuri Voinov wrote: >> >> Amos, you are a wrong. >> >> No Squid-4. It's unstable and not ready for production. Whenever it's >> features. > > So some beta software has bugs therefor

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Amos Jeffries
On 26/06/2016 4:46 a.m., C. L. Martinez wrote: > On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: >> >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> Use search. >> >> Some days agi I've played around with ECDSA certs and drop it due to >> extremal incompatibility with clients. H

Re: [squid-users] Skype Issues

2016-06-25 Thread Amos Jeffries
On 26/06/2016 4:32 a.m., Yuri Voinov wrote: > > Amos, you are a wrong. > > No Squid-4. It's unstable and not ready for production. Whenever it's > features. So some beta software has bugs therefore nobody should ever use it for anything. I find that to be a strange and sad view of the world. Ca

Re: [squid-users] Skype Issues

2016-06-25 Thread Renato Jop
Thanks both for you help. I'll try to make this changes and see if this solves my issues. Renato Jop On Sat, Jun 25, 2016 at 10:32 AM, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Amos, you are a wrong. > > No Squid-4. It's unstable and not ready for production.

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
On Sat 25.Jun'16 at 22:33:56 +0600, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Use search. > > Some days agi I've played around with ECDSA certs and drop it due to > extremal incompatibility with clients. Here was this thread. > > Is this the thread: http://

Re: [squid-users] Problem with certificates and SSLBump

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Use search. Some days agi I've played around with ECDSA certs and drop it due to extremal incompatibility with clients. Here was this thread. 25.06.2016 22:10, C. L. Martinez пишет: > Hi all, > > I have some problems with my squid config when I

Re: [squid-users] Skype Issues

2016-06-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Amos, you are a wrong. No Squid-4. It's unstable and not ready for production. Whenever it's features. Some time ago I have the same issue and know what happens exactly. Skype initial connection site uses RC4 cipher. Which is disabled in most sq

[squid-users] Problem with certificates and SSLBump

2016-06-25 Thread C. L. Martinez
Hi all, I have some problems with my squid config when I use certificates generated with my internal CA. First, my ssl-bump config: acl DiscoverSNIHost at_step SslBump1 acl NoSSLIntercept ssl::server_name_regex -i "/etc/squid/acls/domains.nobump" ssl_bump peek DiscoverSNIHost ssl_bump splice No

Re: [squid-users] Skype Issues

2016-06-25 Thread Amos Jeffries
On 26/06/2016 1:19 a.m., Renato Jop wrote: > Hello, > I've configured squid to filter both HTTP and HTTPS traffic and for the > most part the squid server is working correctly, however, I am always > unable to login with skype. Skype does send all the requests through the > suid server, but lookin

[squid-users] Skype Issues

2016-06-25 Thread Renato Jop
Hello, I've configured squid to filter both HTTP and HTTPS traffic and for the most part the squid server is working correctly, however, I am always unable to login with skype. Skype does send all the requests through the suid server, but looking into the cache.log I always get a Error negotiating

Re: [squid-users] ecap adaper

2016-06-25 Thread joe
ok tks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/ecap-adaper-tp4678171p4678191.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users mailing list squid-users@lists.squid-cache.or

Re: [squid-users] ecap adaper

2016-06-25 Thread Amos Jeffries
On 25/06/2016 10:06 p.m., joe wrote: > thank for the debug option > without deny the POST i dont see any POST packet lol!!and it supose to to go > trough ecap right ?? Maybe yes, maybe no. > since all acl HTTP_STATUS_OK http_status 200 without any restriction should > present POST or GET im righ

Re: [squid-users] flickr.com redirect error

2016-06-25 Thread Amos Jeffries
On 25/06/2016 6:14 p.m., Rafael Akchurin wrote: > Hello Amos, > > The Via from mine is: > > Via:"http/1.1 fts110.flickr.bf1.yahoo.com (ApacheTrafficServer [cMs f ]), > http/1.1 r02.ycpi.ams.yahoo.net (ApacheTrafficServer [cMsSf ]), 1.1 qlproxy > (squid/3.3.8)" > > Might it be the error when co

Re: [squid-users] ecap adaper

2016-06-25 Thread joe
thank for the debug option without deny the POST i dont see any POST packet lol!!and it supose to to go trough ecap right ?? since all acl HTTP_STATUS_OK http_status 200 without any restriction should present POST or GET im right or missing something --- root@proxy:~# squid -v Squid Cache: Versio