Re: [squid-users] HTTPS woes

2017-04-20 Thread Olly Lennox
ache.org> Cc: Olly Lennox <oli...@lennox-it.uk> Sent: Thursday, 20 April 2017, 1:21 Subject: Re: [squid-users] HTTPS woes On 04/19/2017 05:35 PM, Olly Lennox wrote: > I can confirm that disabling the ssl sesison cache seems to have resolved the > issue. Great! >

Re: [squid-users] HTTPS woes

2017-04-19 Thread Alex Rousskov
org'" <squid-us...@squid-cache.org> > Cc: Olly Lennox <oli...@lennox-it.uk> > Sent: Thursday, 20 April 2017, 0:13 > Subject: Re: [squid-users] HTTPS woes > > > > On 04/19/2017 04:48 PM, Olly Lennox wrote: > >> After further investigation the pr

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
ent-factory.com> To: "'squid-users@squid-cache. org'" <squid-us...@squid-cache.org> Cc: Olly Lennox <oli...@lennox-it.uk> Sent: Thursday, 20 April 2017, 0:13 Subject: Re: [squid-users] HTTPS woes On 04/19/2017 04:48 PM, Olly Lennox wrote: > After further investigation

Re: [squid-users] HTTPS woes

2017-04-19 Thread Alex Rousskov
On 04/19/2017 04:48 PM, Olly Lennox wrote: > After further investigation the problem is something to do with permissions > related to ssl_crtd. No, it is not (or at least not yet). > I can run squid as root but using the default account (proxy?) it > won't run and is giving this error in

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
From: Eliezer Croitoru <elie...@ngtech.co.il> To: "'squid-users@squid-cache. org'" <squid-us...@squid-cache.org> Cc: 'Olly Lennox' <oli...@lennox-it.uk>; 'L. P. H. van Belle' <be...@bazuin.nl> Sent: Wednesday, 19 April 2017, 22:24 Sub

Re: [squid-users] HTTPS woes

2017-04-19 Thread Eliezer Croitoru
To: Olly Lennox <oli...@lennox-it.uk>; L. P. H. van Belle <be...@bazuin.nl>; squid-users@squid-cache. org <squid-us...@squid-cache.org> Subject: Re: [squid-users] HTTPS woes Sorry it's back, I've narrowed down the problem, hopefully someone can help. When Squid starts it cre

Re: [squid-users] HTTPS woes

2017-04-19 Thread Amos Jeffries
On 20/04/17 04:30, Olly Lennox wrote: Sorry it's back, I've narrowed down the problem, hopefully someone can help. When Squid starts it creates the directory /var/run/squid as user proxy:proxy. If I remove this or leave it as is then the application won't launch on subsequent reboots. If I

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
<be...@bazuin.nl> To: "squid-users@squid-cache. org" <squid-us...@squid-cache.org> Sent: Wednesday, 19 April 2017, 11:05 Subject: Re: [squid-users] HTTPS woes Hai, Im guess, squid is starting to soon, or there is not /dev/shm Check/Try adding, if not already

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
. P. H. van Belle <be...@bazuin.nl>; "squid-users@squid-cache. org" <squid-us...@squid-cache.org> Sent: Wednesday, 19 April 2017, 12:24 Subject: Re: [squid-users] HTTPS woes Hi Louis, Thanks a lot for the link, I'll implement that once I get this problem fixed. Sadly

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
017, 11:05 Subject: Re: [squid-users] HTTPS woes Hai, Im guess, squid is starting to soon, or there is not /dev/shm Check/Try adding, if not already in /etc/fstab none /dev/shmtmpfs defaults0 0 And reboot the server. Or, i dont know and someone else can tel

Re: [squid-users] HTTPS woes

2017-04-19 Thread L . P . H . van Belle
-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens Olly Lennox > Verzonden: woensdag 19 april 2017 11:22 > Aan: Amos Jeffries; squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] HTTPS woes > > Thanks Amos, I'll install this. One last question if I

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
quot;squid-users@lists.squid-cache.org" ><squid-users@lists.squid-cache.org> >Sent: Tuesday, 18 April 2017, 16:00 >Subject: Re: [squid-users] HTTPS woes > > > >I have automated cron job to refresh Mozilla CA's bundle by monthly basis. >Intermediate CA's, however, requi

Re: [squid-users] HTTPS woes

2017-04-18 Thread Amos Jeffries
squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> *Sent:* Tuesday, 18 April 2017, 16:00 *Subject:* Re: [squid-users] HTTPS woes I have automated cron job to refresh Mozilla CA's bundle by monthly basis. Intermediate CA's, however, requires non-scheduled mainte

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
uesday, 18 April 2017, 16:00 Subject: Re: [squid-users] HTTPS woes I have automated cron job to refresh Mozilla CA's bundle by monthly basis. Intermediate CA's, however, requires non-scheduled maintenance. I've maintain it by demand. 18.04.2017 20:17, Olly Lennox пишет: Thanks Yuri! T

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri Voinov
-- > *From:* Yuri Voinov <yvoi...@gmail.com> > *To:* Olly Lennox <oli...@lennox-it.uk>; > "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> > *Sent:* Tuesday, 18 April 2017, 14:43 > *Subject:* Re: [squid-users] HTTPS woes >

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
com> To: Olly Lennox <oli...@lennox-it.uk>; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Tuesday, 18 April 2017, 14:43 Subject: Re: [squid-users] HTTPS woes You talked about two different things. 1. root CA usually built-in in clients.

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri Voinov
rg> > *Sent:* Tuesday, 18 April 2017, 14:03 > *Subject:* Re: [squid-users] HTTPS woes > > > > 18.04.2017 18:56, Olly Lennox пишет: >> I'm using >> >> sslproxy_foreign_intermediate_certs >> >> Is this the same thing? > No. You firstly required CA ro

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
ers@lists.squid-cache.org> Sent: Tuesday, 18 April 2017, 14:03 Subject: Re: [squid-users] HTTPS woes 18.04.2017 18:56, Olly Lennox пишет: I'm using  sslproxy_foreign_intermediate_certs Is this the same thing? No. You firstly required CA roots available for squid

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri
squid-users@lists.squid-cache.org *Sent:* Tuesday, 18 April 2017, 13:51 *Subject:* Re: [squid-users] HTTPS woes Try to specify roots CA bundle/dir explicity by specifying one of this params: # TAG: sslproxy_cafile #file containing CA certificates to use when verifying server #certif

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
com> To: squid-users@lists.squid-cache.org Sent: Tuesday, 18 April 2017, 13:51 Subject: Re: [squid-users] HTTPS woes Try to specify roots CA bundle/dir explicity by specifying one of this params: #  TAG: sslproxy_cafile #    file containing CA certificates to use when verifying

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri
: Olly Lennox <oli...@lennox-it.uk> To: Amos Jeffries <squ...@treenet.co.nz>; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Sunday, 16 April 2017, 9:31 Subject: Re: [squid-users] HTTPS woes Thanks Amos, it's finally built but I had to

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
rg" <squid-users@lists.squid-cache.org> Sent: Sunday, 16 April 2017, 9:31 Subject: Re: [squid-users] HTTPS woes Thanks Amos, it's finally built but I had to disabled ecap, for whatever reason this kept failing (with version 1.0.1 installed). It failed on a reference to the Area funct

Re: [squid-users] HTTPS woes

2017-04-16 Thread Olly Lennox
how it goes. Olly oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Amos Jeffries <squ...@treenet.co.nz> To: squid-users@lists.squid-cache.org Sent: Saturday, 15 April 2017, 23:07 Subject: Re: [squid-users] HTTPS woes On 15/04/2017 9:59 a.m., Olly Lennox wrote: >

Re: [squid-users] HTTPS woes

2017-04-15 Thread Amos Jeffries
On 15/04/2017 9:59 a.m., Olly Lennox wrote: > Hi Guys. > I'm still struggling with this. I'm trying to build a version of 3.5 but I > just can't get it to work. I'm currently attempting to rebuild the stretch > package with SSL enabled but build keeps failing with the following: >

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
gt;; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Friday, 14 April 2017, 14:07 Subject: Re: [squid-users] HTTPS woes Thanks Rafael, I'm trying this out now, have had to enable the stretch repos but seems to be building! oli...@lennox-it

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
sts.squid-cache.org> Sent: Friday, 14 April 2017, 12:40 Subject: Re: [squid-users] HTTPS woes >>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version? > And secondly; a

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
(Sorry, reposted because first email was too big I've edited out some bits) No I'm not getting much luck finding these, This is the result of my make install, has it installed right? result of make - Making all in compat make[1]: Entering directory

Re: [squid-users] HTTPS woes

2017-04-14 Thread Antony Stone
<squid-users@lists.squid-cache.org> Sent: Friday, 14 April 2017, 12:40 > Subject: Re: [squid-users] HTTPS woes > > >>> Then my config in Squid is like this, the dhparams file I generated as > >>> per instructions in the squid wiki: > >> First of all: what's

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 11:52 p.m., Olly Lennox wrote: > I've tried building it and it seems to have make install -ed > correctly but I'm getting "command not found" when I try to execute > squid3. Is there a step I'm missing? Debian latest and custom builds use the binary name 'squid' for versions 3.5+.

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
To: "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Friday, 14 April 2017, 12:40 Subject: Re: [squid-users] HTTPS woes >>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the s

Re: [squid-users] HTTPS woes

2017-04-14 Thread Rafael Akchurin
>>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version? > And secondly; are you sufficiently capable with Debian to (cross-)build your > own Squid package that can run on Raspian? > The Debian

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 6:00 a.m., Yuri Voinov wrote: > > > 13.04.2017 22:57, Olly Lennox пишет: >> Hi There, >> >> I've been battling for the last few days on a little project to setup a >> Raspberry PI device as a small parental blocking server. I've managed to >> configure the device to work as a

Re: [squid-users] HTTPS woes

2017-04-13 Thread Yuri Voinov
13.04.2017 22:57, Olly Lennox пишет: > Hi There, > > I've been battling for the last few days on a little project to setup a > Raspberry PI device as a small parental blocking server. I've managed to > configure the device to work as a transparent proxy using squid which is > assigned as the

[squid-users] HTTPS woes

2017-04-13 Thread Olly Lennox
Hi There, I've been battling for the last few days on a little project to setup a Raspberry PI device as a small parental blocking server. I've managed to configure the device to work as a transparent proxy using squid which is assigned as the default gateway via DHCP and after a lot of