[squid-dev] Introduction / SslBump upstream ssl proxy support

2017-07-31 Thread Mihai Ene
Hello, I'm a developer with higher level languages experience very little commercial c++ development on my hands. I've been following the SslBump feature for a while now, and this includes source code changes. SslBumping with upstream proxies was completely restricted when bug 3209 was patched i

Re: [squid-dev] [RFC] Disable Github issue tracker

2017-07-31 Thread Alex Rousskov
On 07/22/2017 03:25 PM, Eliezer Croitoru wrote: > Then it's also +1 for me to close for now Done (a week ago). > but promote the README.md which will redirect users to the bugzilla.. Please review the following README changes that are meant to address (albeit indirectly) your request to promot

Re: [squid-dev] [RFC] Migrate explicit syslog calls to debugs

2017-07-31 Thread Alex Rousskov
On 07/31/2017 03:04 AM, Amos Jeffries wrote: > On 28/07/17 11:12, Alex Rousskov wrote: >> AFAICT[1], "too long" here means "more than 400 characters" in extreme >> cases and "more than 2000 characters" in most environments, so any >> reasonable DBG_CRITICAL and DBG_IMPORTANT messages should be safe

Re: [squid-dev] [PATCH] Reuse reserved Negotiate and NTLM helpers after an idle timeout.

2017-07-31 Thread Alex Rousskov
On 07/31/2017 09:24 AM, Amos Jeffries wrote: >>> To do so otherwise would randomly >>> allow replay attacks to succeed Please give a specific example where the proposed changes would allow a new kind of replay attacks to succeed, given a correctly functioning Squid and a correctly functioning he

Re: [squid-dev] [PATCH] Reuse reserved Negotiate and NTLM helpers after an idle timeout.

2017-07-31 Thread Amos Jeffries
On 31/07/17 22:24, Christos Tsantilas wrote: Στις 30/07/2017 06:48 πμ, ο Amos Jeffries έγραψε: On 27/07/17 18:52, Christos Tsantilas wrote: The patch. Στις 26/07/2017 12:37 μμ, ο Christos Tsantilas έγραψε: Squid can be killed or maimed by enough clients that start multi-step connection authen

Re: [squid-dev] [PATCH] Reuse reserved Negotiate and NTLM helpers after an idle timeout.

2017-07-31 Thread Christos Tsantilas
Στις 30/07/2017 06:48 πμ, ο Amos Jeffries έγραψε: On 27/07/17 18:52, Christos Tsantilas wrote: The patch. Στις 26/07/2017 12:37 μμ, ο Christos Tsantilas έγραψε: Squid can be killed or maimed by enough clients that start multi-step connection authentication but never follow up with the second H

Re: [squid-dev] [RFC] Migrate explicit syslog calls to debugs

2017-07-31 Thread Amos Jeffries
On 28/07/17 11:12, Alex Rousskov wrote: On 07/26/2017 11:04 PM, Amos Jeffries wrote: On 27/07/17 16:06, Alex Rousskov wrote: Squid master process uses many explicit syslog() calls like these: syslog(LOG_ALERT, "fork failed: %s", xstrerr(xerrno)); syslog(LOG_ALERT, "Suspiciously high wor