Re: [squid-users] SSLBump just not working

2016-08-05 Thread Amos Jeffries
On 5/08/2016 2:13 p.m., JR Dalrymple wrote: > > For posterity's sake, here are the relevant parts of my working > configuration: > > /etc/pf.conf: > pass in proto tcp to any port 80 divert-to 127.0.0.1 port 3128 > pass in proto tcp to any port 443 divert-to 127.0.0.1 port 3129 > > squid.conf: >

Re: [squid-users] SSLBump just not working

2016-08-04 Thread JR Dalrymple
On Thu, Aug 4, 2016 at 10:20 AM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 08/03/2016 08:45 PM, JR Dalrymple wrote: > > > To be brutally honest the whole concept is still a bit lost on me > > [rant]Admitting one's limitations is often the most difficult first > step, but please

Re: [squid-users] SSLBump just not working

2016-08-04 Thread Alex Rousskov
On 08/03/2016 08:45 PM, JR Dalrymple wrote: > To be brutally honest the whole concept is still a bit lost on me [rant]Admitting one's limitations is often the most difficult first step, but please do not stop here! Suggestions for where to go next: Ask good questions, do not accept answers you do

Re: [squid-users] SSLBump just not working

2016-08-03 Thread JR Dalrymple
On Wed, Aug 3, 2016 at 9:14 AM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 08/02/2016 09:53 PM, Amos Jeffries wrote: > > > To do bumping with server certificate mimic you need the 'bump' action > > to occur at #3. > Thanks for the clarification. I probably read that 100 times in

Re: [squid-users] SSLBump just not working

2016-08-03 Thread Alex Rousskov
On 08/02/2016 09:53 PM, Amos Jeffries wrote: > To do bumping with server certificate mimic you need the 'bump' action > to occur at #3. > > Like: > acl step1 at_step SslBump1 > acl step2 at_step SslBump2 > ssl_bump peek step1 > ssl_bump stare step2 > ssl_bump bump all > > (or maybe stare an

Re: [squid-users] SSLBump just not working

2016-08-02 Thread Amos Jeffries
On 2/08/2016 1:30 p.m., JR Dalrymple wrote: > I have a freshly installed Squid from source on a likewise freshly > installed OpenBSD system. Attempting to replace an aging stub Squid on > Linux with transparent with SSLBump. I think I have everything set up > pretty skookup, the symptom is it just

[squid-users] SSLBump just not working

2016-08-01 Thread JR Dalrymple
I have a freshly installed Squid from source on a likewise freshly installed OpenBSD system. Attempting to replace an aging stub Squid on Linux with transparent with SSLBump. I think I have everything set up pretty skookup, the symptom is it just isn't working. When I browse to an https website I g