[squid-users] Https inception gives 503 error

Hi, I am using pfsense with squid and squidguard for web filtering without client side certificate installation. I did manage to block pages and mostly error free internet traffic. But for the last thing i cannot work it. I want to redirect users to a block page and i did this with http but cannot

[squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

Hi, I’m new to this group. I just setup a squid ver 4.5 on my ubuntu machine. I configured this proxy to receive https packets from another device on the same LAN, and modified the iptables to redirect the port 443 packets to the squid proxy port 3130. I can see the client https packet has bee

Re: [squid-users] Resolved: Peek-and-splice not working when mixing TLS1.3 servers and TLS1.2 clients

On 12/7/19 8:54 AM, Nikolaus wrote: > https://github.com/nthuemmel/squid/tree/tls_downgrade_compatibility > > I would of course be glad if the fix could be merged into the main squid > repository. If you are a dev, please let me know what you think and if I > should open a pull request. FYI: Th

[squid-users] Resolved: Peek-and-splice not working when mixing TLS1.3 servers and TLS1.2 clients

I was able to solve the issue, fixing both squid-side "error:1425F175:SSL routines:ssl_choose_client_version:inappropriate fallback (1/-1/0)" and client-side certificate verification errors when attempting to contact TLS 1.3 server over a TLS 1.3-enabled squid from a TLS 1.2 client. I will first ex