Re: [squid-users] SSL Bump with HTTP Cache Peer Parent

2018-12-12 Thread Sam Handley
On 13/12/18 2:12 pm, Amos Jeffries wrote: [ please keep the traffic on-list. If you want private assistance I do consult for a small fee. ] On 13/12/18 2:51 pm, Sam Handley wrote: On 13/12/18 12:00 pm, Amos Jeffries wrote: Thank you for your reply, it seems adding in an extra step could solv

Re: [squid-users] SSL Bump with HTTP Cache Peer Parent

2018-12-12 Thread Amos Jeffries
[ please keep the traffic on-list. If you want private assistance I do consult for a small fee. ] On 13/12/18 2:51 pm, Sam Handley wrote: > On 13/12/18 12:00 pm, Amos Jeffries wrote: > > Thank you for your reply, it seems adding in an extra step could solve it, > even if not ideal. > Just a few

Re: [squid-users] HTTPS proxy setup questions

2018-12-12 Thread Amos Jeffries
On 13/12/18 12:50 pm, Subhish Pillai wrote: > Thanks Alex, that was very helpful. > > Based on your explanation, I just want to use squid as a blind TCP > tunnel carrying the HTTPS connection from client to app server.  > > In that case, I don't need to use ssl_bump feature and the ssl_crtd > pro

Re: [squid-users] HTTPS proxy setup questions

2018-12-12 Thread Amos Jeffries
On 13/12/18 11:49 am, Alex Rousskov wrote: > On 12/12/18 12:58 PM, subhish.pillai wrote: > >> 2. What is the difference between "http_port 3128 intercept" and "http_port >> 3128 transparent"? Do i need to setup the http_port as either of these? > > The difference is in whether Squid impersonates

Re: [squid-users] SSL Bump with HTTP Cache Peer Parent

2018-12-12 Thread Amos Jeffries
On 13/12/18 12:15 pm, sam.handley wrote: > I am not 100% confident what I am asking is possible but I'd love it to be > confirmed. > > Here is what our setup would look like, I’ve explained a bit below: > > DEVICE ---> PRX3 (HTTPS CACHE) ---> PRX2 ---> PRX1 ---> INTERNET > > Our current environm

Re: [squid-users] HTTPS proxy setup questions

2018-12-12 Thread Subhish Pillai
Thanks Alex, that was very helpful. Based on your explanation, I just want to use squid as a blind TCP tunnel carrying the HTTPS connection from client to app server. In that case, I don't need to use ssl_bump feature and the ssl_crtd program for certificate management, is that correct? Would th

[squid-users] SSL Bump with HTTP Cache Peer Parent

2018-12-12 Thread sam.handley
I am not 100% confident what I am asking is possible but I'd love it to be confirmed. Here is what our setup would look like, I’ve explained a bit below: DEVICE ---> PRX3 (HTTPS CACHE) ---> PRX2 ---> PRX1 ---> INTERNET Our current environment is a bit behind the times and inflexible. We have a l

Re: [squid-users] HTTPS proxy setup questions

2018-12-12 Thread Alex Rousskov
On 12/12/18 12:58 PM, subhish.pillai wrote: > 1. What is the difference between SSL bumping and SSL interception? These concepts describe activities at different layers: * SSL bumping is, in Squid context, inspection of SSL traffic that often also involves impersonating the origin server and d

[squid-users] HTTPS proxy setup questions

2018-12-12 Thread subhish.pillai
Hi All, I have a client application that sends periodic usage data to an external application server over HTTPS using REST API calls. I want to tunnel this connection through an HTTPS proxy at the client location. I am trying to setup Squid v4.4 on Centos 7 server for doing this. The clients are

Re: [squid-users] TCP_MISS_ABORTED/000 FATAL: Received Segment Violation

2018-12-12 Thread Amos Jeffries
On 13/12/18 1:58 am, Rejaine Silveira Monteiro wrote: > Hi, all > > I'm trying to download a certain file from an FTP server. I can make > the access directly, without proxy, but when I use Squid the following > error occurs: > > TCP_MISS_ABORTED/000 0 GET > ftp://ftp.ibge.gov.br/Precos_Indices_

[squid-users] TCP_MISS_ABORTED/000 FATAL: Received Segment Violation

2018-12-12 Thread Rejaine Silveira Monteiro
Hi, all I'm trying to download a certain file from an FTP server. I can make the access directly, without proxy, but when I use Squid the following error occurs: TCP_MISS_ABORTED/000 0 GET ftp://ftp.ibge.gov.br/Precos_Indices_de_Precos_ao_Consumidor/IPCA/Serie_Historica/ipca_SerieHist.zip - HIER