Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-25 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 10:06 PM, Jason Haar wrote: > I think you are confusing proxy authentication with WPAD/PAC files. > WPAD knows nothing about proxy authentication: browsers do > > ie you use WPAD to tell browsers where/if they need to use a proxy > and u

Re: [squid-users] Persistent Connections - only one side

2014-11-25 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Mathew, The defaults of squid should do what you are asking for as long as we are talking about the same src domain and IP. There are settings to make the persistent connections more effective but I do not remember them by heart. The start point w

[squid-users] Transparent proxy with Peek and Splice feature.

2014-11-25 Thread Vadim Rogoziansky
Hello All. My goal is to do ssl bumping in transparent proxy mode with domain exclude possibility. Let me tell you about squid's strange behaviour when I'm trying to do it. In browsers it says something like this: /This server could not prove that it is www.ukr.net; its security certificate i

[squid-users] Existing root certificate not working with SSL Bump (squid 3.3.10)

2014-11-25 Thread HaxNobody
Hello, We are trying to configure Squid with SSL bump in order to filter traffic with a content filter. We have an existing self-signed root certificate and private key that we use successfully with other similar proxy software, and we wish to re-use it with Squid so that we don't have to distribu

[squid-users] Persistent Connections - only one side

2014-11-25 Thread Mathew Marulla
Need to know if this is even possible… We have a PHP app that uses CURL to send requests/get responses from servers of various business partners. The connections to these partner servers are not currently persistent. Setting keep-alive headers would be ineffective because the connections are