Re: [squid-users] Squid 3.5.27 - While access https website, always "Your connection is not secure"

2018-04-28 Thread fourirakbar
Thank you Amos. > In short, do not do any of the above liens up to and including > "http_access allow all". 'insecure' is the least of your worries with > this as it currently is Why I use http_access allow all is, at least I can access https website first. Then I certainly use acl, and didn't

Re: [squid-users] Squid 4 %R in deny_info

2018-04-28 Thread Amos Jeffries
On 29/04/18 09:57, Rick Ellis wrote: > Before trying squid 4 this worked as intended: > > acl PORT80 myport 80 FYI: That ACL type is deprecated because it is so unreliable. Use myportname (Squid listening host/IP:port or name= parameter) or localport (the src-port from TCP) , depending on which i

Re: [squid-users] Bypass HSTS sites in squid?

2018-04-28 Thread Amos Jeffries
On 29/04/18 07:22, Matthias Eder wrote: > I have set up after along struggle a transparent proxy with squid, > squidguard and privoxy. This works quite fine, surprisingly also for > https sites. Unfortunately the performance is not too good, but I guess > the man-in-the-middle attack is quite a lot

[squid-users] Squid 4 %R in deny_info

2018-04-28 Thread Rick Ellis
Before trying squid 4 this worked as intended: acl PORT80 myport 80 acl MYSITE dstdomain www.domain.com http_access deny PORT80 MYSITE deny_info 301:https://www.domain.com%R MYSITE For 4.0.24 the %R is always blank. So all redirected go to the root of the website. Is there something else I should

[squid-users] Bypass HSTS sites in squid?

2018-04-28 Thread Matthias Eder
I have set up after along struggle a transparent proxy with squid, squidguard and privoxy. This works quite fine, surprisingly also for https sites. Unfortunately the performance is not too good, but I guess the man-in-the-middle attack is quite a lot of work for squid ;-). Before anyone is compla

Re: [squid-users] Squid 3.5.27 - While access https website, always "Your connection is not secure"

2018-04-28 Thread Amos Jeffries
On 28/04/18 20:56, fourirakbar wrote: > Maybe this is same with this topic > > > . But now I use squid version 3.5.27 > > Here my squid version > Squid Cache: Version 3.5.27 > Service Name: sq

[squid-users] Squid 3.5.27 - While access https website, always "Your connection is not secure"

2018-04-28 Thread fourirakbar
Maybe this is same with this topic . But now I use squid version 3.5.27 Here my squid version Squid Cache: Version 3.5.27 Service Name: squid Ubuntu linux This binary uses OpenSSL 1.0.2g 1 M