Re: [squid-users] squid.conf blocking live video stream

2016-12-19 Thread Robert Watson
ially, and Amos suggestion won't achieve that. On Mon, Dec 19, 2016 at 9:28 AM, Robert Watson wrote: > The site I was having trouble with was video.foxnews.com. I took Amos > suggestion and added deny via, request-x-forward and that fixed the issue > but I was trying to create the

[squid-users] squid.conf blocking live video stream

2016-12-16 Thread Robert Watson
Sorry if this shows up twice on the mailing list... I've setup a transparent proxy squid v3.5.22 on a x86_64 Arch Linux server. The transparent proxy is working fine for web page caching but live video isn't getting through. I thought it was a netfilter issue but bypassing the proxy fixes this is

Re: [squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

2014-10-16 Thread Robert Watson
:43 PM, Robert Watson wrote: > Has anyone got this error when performing https proxy? I only receive it > on a couple of https websites. How to fix? > Robert > ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-

Re: [squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

2014-10-16 Thread Robert Watson
isfied with the host security credentials. On Wed, Oct 15, 2014 at 1:43 PM, Robert Watson wrote: > Has anyone got this error when performing https proxy? I only receive it > on a couple of https websites. How to fix? > Robert > ___ squid-users

Re: [squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

2014-10-16 Thread Robert Watson
/10/16 14:41:11 kid1| fwdNegotiateSSL: Error negotiating SSL connection on FD 26: error::lib(0):func(0):reason(0) (5/0/0)* On Wed, Oct 15, 2014 at 1:43 PM, Robert Watson wrote: > Has anyone got this error when performing https proxy? I only receive it > on

[squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

2014-10-15 Thread Robert Watson
Has anyone got this error when performing https proxy? I only receive it on a couple of https websites. How to fix? Robert ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

2014-10-13 Thread Robert Watson
an addendum to my previous post. I get NET::ERR_CERT_COMMON_NAME_INVALID when using chrome I get a squid error page when using IE The following error was encountered while trying to retrieve the URL: ://204.44.2.199:443 *Failed to establish a se

Re: [squid-users] transparent proxy https and self signed certificate error

2014-10-13 Thread Robert Watson
. So I'm assuming it's complaining about the CN generated by squid/ssl_bump? On Mon, Oct 13, 2014 at 9:22 AM, Robert Watson wrote: > Ok, finally got the certificate installed properly and can proxy some > https sites (gmail, google) but I get an error when going to a bank >

Re: [squid-users] transparent proxy https and self signed certificate error

2014-10-05 Thread Robert Watson
still trying to get this working. To eliminate the self signed certificate issue, I got a official signed certificate from Starfield Tech. LLC. They've sent two certifcates but I'm unsure how to use these certificates since the ssl_bump parameters only have one certificate as a parameter On Sun,

[squid-users] transparent proxy https and self signed certificate error

2014-10-04 Thread Robert Watson
using squid 3.4.8, compiled from source with ./configure flags --enable-icap-client --enable-ssl --enable-ssl-crtd configured iptables for transparent proxy (redirect 80 to 3128) and everything works fine configured iptables for transparent proxy (redirect 443 to 3127) but can't get transparent pr