Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-23 Thread ngtech1ltd
https://ngtech.co.il/ My-Tube: https://tube.ngtech.co.il/ From: squid-users On Behalf Of UnveilTech - Support Sent: Wednesday, 23 November 2022 14:59 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] [SPAM] Re: Squid 5: server_cert_fingerprint not working fine... Amos, Fo

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread David Touzeau
Thanks Amos for this clarification, We also have the same needs and indeed, we face with the same approach. It is possible that the structure of Squid could not, in some cases, recovering this type of information. Although the concept of a proxy is neither more nor less than a big browser

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread David Touzeau
Thanks Amos for this clarification, We also have the same needs and indeed, we face with the same approach. It is possible that the structure of Squid could not, in some cases, recovering this type of information. Although the concept of a proxy is neither more nor less than a big browser

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread ngtech1ltd
: https://tube.ngtech.co.il/ -Original Message- From: squid-users On Behalf Of UnveilTech - Support Sent: Saturday, 19 November 2022 15:44 To: Amos Jeffries ; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Squid 5: server_cert_fingerprint not working fine... Hi Amos, Quick

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread Amos Jeffries
On 20/11/2022 2:43 am, UnveilTech - Support wrote: Hi Amos, Quick update... A 10 lines PHP helper is able to catch the SHA1 key with a basis "openssl_x509_fingerprint" function when Squid, a 1 million lines product, could not be able ? The question-conclusion you have reached is

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread Amos Jeffries
On 19/11/2022 2:55 am, UnveilTech - Support wrote: Hi Amos, We have tested with a "ssl_bump bump" ("ssl_bump all" and "ssl_bump bump sslstep1"), it does not solve the problem. According to Alex, we can also confirm it's a bug with Squid 5.x and TLS 1.3. Okay. It seems Squid is only

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread UnveilTech - Support
'Amos Jeffries' ; squid-users@lists.squid-cache.org Objet : RE: [squid-users] Squid 5: server_cert_fingerprint not working fine... Hi Amos, We have tested with a "ssl_bump bump" ("ssl_bump all" and "ssl_bump bump sslstep1"), it does not solve the problem. Acco

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-18 Thread UnveilTech - Support
od for the future... Bye Fred -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Amos Jeffries Envoyé : vendredi 18 novembre 2022 06:34 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] Squid 5: server_cert_fingerprint not worki

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-17 Thread Amos Jeffries
On 18/11/2022 5:02 am, UnveilTech - Support wrote: Hello Squid Team, Can you have a look to this bugzilla case : https://bugs.squid-cache.org/show_bug.cgi?id=5245 it’s about a bug with Squid 5.7 and TLS 1.3. Critical case created the 2022-10-27 09:59 UTC, it would be nice to have a

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-17 Thread UnveilTech - Support
: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de UnveilTech - Support Envoyé : mardi 25 octobre 2022 18:22 À : squid-users@lists.squid-cache.org Objet : [squid-users] Squid 5: server_cert_fingerprint not working fine... Hello, Here is the part of our squid.conf

[squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-10-25 Thread UnveilTech - Support
Hello, Here is the part of our squid.conf on Squid 5 : ... acl my_cf1_list server_cert_fingerprint '/etc/squid5/CF1.txt' ssl_bump peek all ssl_bump terminate my_cf1_list ssl_bump splice all ... We're not sure about the ssl_bump keys and options to use here, to be honnest we've already