[squid-users] Question about squid content modification

2014-08-30 Thread Carlos R Laguna
Hello to every one,i have this weird scenario and after some reading it looks like it is possible but still have my doubts, i have some user out of my net that are behind a proxy and only allow *.net however they need to access to example.com so i set a reverse proxy + jesred to whenever

[squid-users] Cache a site which is redirected by DNS manipulation

2014-08-30 Thread nuhll
Hi, i had a thread here: http://squid-web-proxy-cache.1019090.n4.nabble.com/ONLY-Cache-certain-Websites-td4667121.html But ive comen across so many problems that i decided to just cache one website (windows updates). The Squid Proxy need to cache onle domains like: windowsupdate.com

Re: [squid-users] Cache a site which is redirected by DNS manipulation

2014-08-30 Thread Eliezer Croitoru
Hey, The question is much more complicated then presented. To make windows updates to be cached you need to understand much more then just squid basics! You will need to analyze and reverse engineer windows updates ways of updating a PC and only then decide on the right way to do that. It is

[squid-users] squid-3.4.7 may fix sec_error_extension_value_invalid error, but that's not enough

2014-08-30 Thread Jason Haar
On 28/08/14 04:43, Amos Jeffries wrote: * Various SSL-bump certificate mimic errors These bugs show up most notably for users of Firefox complaining about a sec_error_inadequate_key_usage error. They are caused by Squid generating a fake certificate with the wrong X.509 version details for

RE: [squid-users] squid-3.4.7 may fix sec_error_extension_value_invalid error, but that's not enough

2014-08-30 Thread Rafael Akchurin
Hello Jason, I did even rebuild my stock CentOS 7 Squid to see the error was not gone, silly me thanks a lot! Raf -Original Message- From: Jason Haar [mailto:jason_h...@trimble.com] Sent: Saturday, August 30, 2014 11:38 PM To: squid-users@squid-cache.org Subject: [squid-users]

Re: [squid-users] squid-3.4.7 may fix sec_error_extension_value_invalid error, but that's not enough

2014-08-30 Thread Eliezer Croitoru
Just wondering what have you done to rebuild the cert cache? Eliezer On 08/31/2014 01:31 AM, Rafael Akchurin wrote: Hello Jason, I did even rebuild my stock CentOS 7 Squid to see the error was not gone, silly me thanks a lot! Raf

Re: [squid-users] squid-3.4.7 may fix sec_error_extension_value_invalid error, but that's not enough

2014-08-30 Thread Jason Haar
On 31/08/14 10:36, Eliezer Croitoru wrote: Just wondering what have you done to rebuild the cert cache? ssl_crtd is responsible for creating the fake server certs, and it stores them wherever the squid.conf sslcrtd_program directive tells it to Each fake cert is a file, so I did the following