Re: [squid-users] change squid proxy into intercept instead
Great thanks Amos for that clarification :) On Wed, 5 Jul 2023, 18:28 Amos Jeffries, wrote: > On 4/07/23 06:02, robert k Wild wrote: > > hi all, > > > > running squid proxy with SSL-bump and some sites dont like squid being > > MITM and it breaks the SSL cert, so i do peek/splice/bump so the SSL > > cert goes straight to the client without squid inspecting it > > > > do you think if i make squid into an intercept proxy it will resolve the > > peek/splice/bump issue ie i wont need it anymore > > > > It will not have any effect on your problem. > > > Cheers > Amos > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] change squid proxy into intercept instead
On 4/07/23 06:02, robert k Wild wrote: hi all, running squid proxy with SSL-bump and some sites dont like squid being MITM and it breaks the SSL cert, so i do peek/splice/bump so the SSL cert goes straight to the client without squid inspecting it do you think if i make squid into an intercept proxy it will resolve the peek/splice/bump issue ie i wont need it anymore It will not have any effect on your problem. Cheers Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] trickeling support in squid as icap client
On 6/30/23 05:55, Dieter Bloms wrote: Hello, we are currently using the Squid with an ICAP virus scanner, which is capable of trickling. There are many manufacturers who support the ICAP protocol but not trickling. Therefore, in my opinion, it would make sense if squid supported trickeling as ICAP client. Then you could use any ICAP virus scanner independent from trickling support of the scanner. What do you think about the idea? I think it is a good idea to add quality trickling support on top of Squid adaptation layer, covering not just ICAP services, but eCAP adapters as well. Most of the trickling code should probably be located outside of ICAP- or eCAP-specific code. Based on my team experience with implementing trickling in ICAP and eCAP adapters, proper trickling support is far from trivial and requires a few configuration options. If somebody decides to work on this project, I recommend starting with a squid-dev RFC detailing essential Squid configuration and API changes. Cheers, Alex. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
