Re: [squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-23 Thread Michael Ludvig
Hi Amos On 09/11/15 12:55, Amos Jeffries wrote: On 9/11/2015 11:55 a.m., Michael Ludvig wrote: [client] -> HTTPS -> [my_proxy] -> SSL -> [upstream_proxy] -> HTTPS -> [target] Can you provide some config hints for both proxies please? The SSL-related bits only as that's the unclear part.

Re: [squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-23 Thread Amos Jeffries
On 24/11/2015 5:49 p.m., Michael Ludvig wrote: > Hi Amos > > On 09/11/15 12:55, Amos Jeffries wrote: >> On 9/11/2015 11:55 a.m., Michael Ludvig wrote: >>> [client] -> HTTPS -> [my_proxy] -> SSL -> [upstream_proxy] -> HTTPS -> >>> [target] >>> >>> Can you provide some config hints for both proxies

Re: [squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-08 Thread Amos Jeffries
On 9/11/2015 11:55 a.m., Michael Ludvig wrote: > Hi Amos > > thanks for your reply. > > On 08/11/15 03:27, Amos Jeffries wrote: >> You are taking secured traffic. Removing the decryption. Then ... > > Yes. Then ... I expected it would make a CONNECT to the upstream proxy > that would in turn do

Re: [squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-07 Thread Amos Jeffries
On 8/11/2015 12:20 a.m., Michael Ludvig wrote: > Hi again > > Does anyone have any idea how to fix the below described problem? Please :) > You are taking secured traffic. Removing the decryption. Then ... >> i.e. auto-generates a fake SSL cert and makes a >> direct connection to the target.

Re: [squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-07 Thread Michael Ludvig
Hi again Does anyone have any idea how to fix the below described problem? Please :) Thanks! Michael On 05/11/15 16:01, Michael Ludvig wrote: Hi I've got a network without direct internet access where I have Squid 3.5.9as a transparent proxylistening on tcp/8080for HTTP and on tcp/8443for

[squid-users] Transparent HTTPS Squid proxy with upstream parent

2015-11-04 Thread Michael Ludvig
Hi I've got a network without direct internet access where I have Squid 3.5.9as a transparent proxylistening on tcp/8080for HTTP and on tcp/8443for HTTPS (redirected via iptablesfrom tcp/80 and tcp/443 respectively). This Squid (proxy-test) doesn't have a direct Internet access either but