Re: [squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Amos Jeffries
On 20/12/18 9:29 am, Bruno de Paula Larini wrote: > Em 19/12/2018 16:29, Patrick Chemla escreveu: >> >> - Having more than one IP on the server, create SSL certificates from >> LetsEncrypt including each a list of some domains and sub-domains >> >> - Create a very bing certificate to have squid usi

Re: [squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Bruno de Paula Larini
Em 19/12/2018 16:29, Patrick Chemla escreveu: - Having more than one IP on the server, create SSL certificates from LetsEncrypt including each a list of some domains and sub-domains - Create a very bing certificate to have squid using it (not the best choice because domains are of different

Re: [squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Squid users
Could you A – forward to different ports B – Use Network address translation? Thoughts… From: squid-users On Behalf Of Patrick Chemla Sent: 19 December 2018 18:29 To: squid-users@lists.squid-cache.org Subject: [squid-users] Multiple SSL certificates on same IP Hi all, Thanks for the great wo

[squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Patrick Chemla
Hi all, Thanks for the great work you do/provide with squid. I am using squid for years, I like it very much, and I am now installing a SSL load-balancing unit for about 80 domains/sub-domains. My OS release is Fedora release 29 (Twen

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
> So, Squid is installed on an Ubuntu VM, which runs on your laptop? Correct > So, the phone is either - direct connection via mobile Internet access, or > via Squid and your home Internet connection - no way for the phone to use the > Internet connection without going via Squid? Yeah - however

Re: [squid-users] Squid4 with GnuTLS - specify ciphers or disable protocols

2018-12-19 Thread Martin Hoffmann
Sorry my fault. Using the correct configure options makes OpenSSL support indeed work :-) Thanks for pointing me to that. I will again try with GnuTLS after getting everything up and running with OpenSSL. Regards, Martin. Am Di., 18. Dez. 2018 um 19:44 Uhr schrieb Amos Jeffries < squ...@treenet.c

Re: [squid-users] squid https: using non-self-signed cert

2018-12-19 Thread Amos Jeffries
On 20/12/18 4:32 am, Meridoff wrote: > 1) I just try to intercept https traffic. I use https_port ... > cert=cert.pem capath=/dir . So squid can generate  sertificates based on > file.cert as Root CA. > Yes. > So, my file.cert is combined from cert and key files. And it is not > sefl-signed. Pl

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Antony Stone
On Wednesday 19 December 2018 at 16:04:36, Squid users wrote: > Hi, > > Re network diagram - Mish Mash / blended / spaghetti I think :p > > Squid is installed on the Ubuntu virtual machine. Sorry forgot to draw that > on. So, Squid is installed on an Ubuntu VM, which runs on your laptop? > Th

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
Hi, Re network diagram - Mish Mash / blended / spaghetti I think :p Squid is installed on the Ubuntu virtual machine. Sorry forgot to draw that on. The phone connects to mobile internet when out of the house, then reverts back to going via squid proxy when my laptop wifi is turned on. The phon

Re: [squid-users] SslBump Peek and Splice using Squid-4.1-5 in Amazon1 Linux with Squid Helpers

2018-12-19 Thread Eliezer Croitoru
Remove the line: http_access allow SSL_ports It bypass all the next ACL's Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf

Re: [squid-users] Advice - Squid Proxy

2018-12-19 Thread Antony Stone
On Wednesday 19 December 2018 at 13:22:57, Squid users wrote: > The attached configuration is currently in use on my computer. It isn't a network diagram; I'm not quite sure what to describe it as, but I don't even see where Squid is on there. > My aim is to use my laptop while I'm out and abou

Re: [squid-users] squid https: using non-self-signed cert

2018-12-19 Thread Amos Jeffries
On 20/12/18 1:13 am, Meridoff wrote: > Hello, when proxying https traffic squid needs self-signed cert. > No, Squid needs a certificate with properties compatible with the particular "proxying https" which your proxy is configured to do. Some of those uses require *a CA* certificate and key. Se

[squid-users] Advice - Squid Proxy

2018-12-19 Thread Squid users
The attached configuration is currently in use on my computer. My aim is to use my laptop while I'm out and about (libraries, work etc) and when I'm at home have my TV and Phone connect into the proxy server. This would allow caching by any device to my laptop so I'm minimising my connections

[squid-users] squid https: using non-self-signed cert

2018-12-19 Thread Meridoff
Hello, when proxying https traffic squid needs self-signed cert. But what if I use not self-signed cert ? I need to use cert of my company which is not self-signed. Is it possible ? May be I can use capath= option for this.. Now squid complains: FATAL: No valid signing SSL certificate configured