[Bug 1895579] Re: SSL Bump not supported in Ubuntu squid package
I have same problem with transparent mode with peek-and-splice (without mimicking): > FATAL: Unknown https_port option 'ssl-bump'. > FATAL: Bungled /etc/squid/squid.conf line 37: https_port 8443 ssl-bump > intercept tls-cert=/etc/squid/ssl/squid.pem -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895579 Title: SSL Bump not supported in Ubuntu squid package To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1895579/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895579] Re: SSL Bump not supported in Ubuntu squid package
Just to complement what Simon said, his request was rejected because of licensing incompatibilities between OpenSSL and squid. This issue has also been raise on Debian (https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=966395). I think there is nothing actionable right now. ** Bug watch added: Debian Bug tracker #966395 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966395 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895579 Title: SSL Bump not supported in Ubuntu squid package To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1895579/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895579] Re: SSL Bump not supported in Ubuntu squid package
SSL bump was replaced by "peek and splice" (https://wiki.squid- cache.org/Features/SslPeekAndSplice) but neither are possible on Ubuntu due to how squid is configured. When I asked in LP: #1860807 for reconsidering to switch to OpenSSL instead of GnuTLS, it was rejected. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895579 Title: SSL Bump not supported in Ubuntu squid package To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1895579/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895579] Re: SSL Bump not supported in Ubuntu squid package
Thanks for taking the time to file this bug and trying to make Ubuntu better. The SSL bump feature was replaced by other similar features by upstream, it is available only from version 3.1 until 3.4, and in Focal we have 4.10. Take a look at this upstream wiki page: https://wiki.squid-cache.org/Features/SslBump So please consider using a different feature for this purpose. Since enabling this feature in Focal is not possible, I am marking this bug as Invalid. ** Changed in: squid (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895579 Title: SSL Bump not supported in Ubuntu squid package To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1895579/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
