Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Amos Jeffries
On 19/01/2017 12:53 p.m., Sameh Onaissi wrote: > Hello, Amos… all > > Yuri, thanks for the reply. > > > Amos, > > I added: Thanks to Eliezer) > sslproxy_cert_error allow all > sslproxy_flags DONT_VERIFY_PEER That is a spot-check config to see if TLS is fully broken or if the fix can be done

[squid-users] Connect strongSwan and Squid on same server

2017-01-18 Thread Varun Singh
Hi, I have installed strongSwan and Squid HTTP Proxy on the same Ubuntu 16.04 server and I am trying to connect both. By connect I mean, I am trying to achieve following: [VPN Client] <--> [VPN Server] <-> [Squid] <--> [Internet] My objective is to connect a VPN client to VPN server and

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Sameh Onaissi
Hello, Amos… all Yuri, thanks for the reply. Amos, I added: Thanks to Eliezer) sslproxy_cert_error allow all sslproxy_flags DONT_VERIFY_PEER to the config file, I am not too worried about the verification since the accessed sites showing problems are government site or local paying

[squid-users] Native FTP relay - connection closes when FTP data connection is used (?)

2017-01-18 Thread Alexander
Hello, I have a question regarding a native FTP relay. I have tried to test this feature like this: [Filezilla Client, 1.1.1.2] <-> [ Router: iptables + squid ] <-> [vsftpd server, 5.5.5.10] Firewall settings on the router are: ip route flush table 100 ip rule add fwmark 1 lookup 100

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Yuri Voinov
18.01.2017 23:40, Eliezer Croitoru пишет: > Thanks for the detail Amos, > > I noticed that couple major Root CA certificates was revoked so it could be > one thing. > And can you give some more details on how to fetch the certificated using the > openssl tools? > (Maybe redirect towards an

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Eliezer Croitoru
Thanks for the detail Amos, I noticed that couple major Root CA certificates was revoked so it could be one thing. And can you give some more details on how to fetch the certificated using the openssl tools? (Maybe redirect towards an article about it) I think that if some sites are have issues

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Amos Jeffries
On 19/01/2017 3:29 a.m., Sameh Onaissi wrote: > Hello Eliezer, all > > Sorry for the late reply. > > When I configure the browser to access a non intercept port, the errors do > not show up and the site is accessed without a problem. > > The client machine has the .crt file installed, but

Re: [squid-users] Squid as Reverse Proxy for Windows

2017-01-18 Thread Amos Jeffries
On 19/01/2017 12:50 a.m., Zoltan Flavius wrote: > Hello all, > > > > I have an API for which we would like to implement a reverse proxy > caching with squid on Windows Server 2008.As I can see here > KnowledgeBase/Windows - Squid Web Proxy Wiki there are some known > limitations and I would

Re: [squid-users] A bunch of SSL errors I am not sure why

2017-01-18 Thread Sameh Onaissi
The server is ubuntu 16.04 Clients are mostly Windows 7 Pro, Windows 8.1 Pro, Windows 10 Pro and a few Mac OS El Capitan 10.11 [cid:2FD1C3AB-E45C-49F0-84AB-0F8AC658BD11@routerb408e2.com]Piensa en el medio ambiente antes de imprimir este email. On Jan 18, 2017, at 9:39 AM, Eliezer Croitoru

Re: [squid-users] Help with Certificate validation

2017-01-18 Thread Yuri
18.01.2017 17:37, Amos Jeffries пишет: On 18/01/2017 8:31 a.m., Yuri Voinov wrote: Put your regression server to SSL Bump splice rule. If the situation requires SSL-Bump at all then there is no good solution, because the browser itself is doing CRL checks and rejection. Squid cannot change

[squid-users] Squid as Reverse Proxy for Windows

2017-01-18 Thread Zoltan Flavius
Hello all, I have an API for which we would like to implement a reverse proxy caching with squid on Windows Server 2008.As I can see here KnowledgeBase/Windows - Squid Web Proxy Wiki there are some known limitations and I would like to ask you some questions: | | | | || |

Re: [squid-users] Limit clients per port

2017-01-18 Thread Amos Jeffries
On 18/01/2017 11:01 p.m., Oğuz İsmail Uysal wrote: > I want to configure squid not to let more than one client per port at a > time. Is it possible ? There are 10 users who use my proxy server and I > have given them different ports to connect to. But I also want to block > multiple clients at one

Re: [squid-users] Help with Certificate validation

2017-01-18 Thread Amos Jeffries
On 18/01/2017 8:31 a.m., Yuri Voinov wrote: > Put your regression server to SSL Bump splice rule. > If the situation requires SSL-Bump at all then there is no good solution, because the browser itself is doing CRL checks and rejection. Squid cannot change browsers internal coding. > >

[squid-users] Limit clients per port

2017-01-18 Thread Oğuz İsmail Uysal
I want to configure squid not to let more than one client per port at a time. Is it possible ? There are 10 users who use my proxy server and I have given them different ports to connect to. But I also want to block multiple clients at one port. How could I do this ?