[squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-14 Thread Andres Salazar
Hello, Iam trying to configure SSLbump so that I can use squid in transparent mode and redirect with iptables/pf port 443 and 80 to squid. When using https_port (based on some mailing lists) it says that isnt recognized. I also tried to use http_port 3129 transparent sslBump cert=/usr/local/squi

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-14 Thread Amos Jeffries
On Sun, 14 Feb 2010 18:30:34 -0600, Andres Salazar wrote: > Hello, > > Iam trying to configure SSLbump so that I can use squid in transparent > mode and redirect with iptables/pf port 443 and 80 to squid. > > When using https_port (based on some mailing lists) it says that isnt > recognized. > I

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-14 Thread Andres Salazar
Hello On Sun, Feb 14, 2010 at 6:59 PM, Amos Jeffries wrote: >  "key=cert=" ?? I saw some examples where they where seperated. It should be only one file right? Is my process of creating a crt and key sound correct though? Thank you.

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-14 Thread Amos Jeffries
On Sun, 14 Feb 2010 19:28:28 -0600, Andres Salazar wrote: > Hello > > On Sun, Feb 14, 2010 at 6:59 PM, Amos Jeffries > wrote: > >> "key=cert=" ?? > > I saw some examples where they where seperated. It should be only one > file right? Is my process of creating a crt and key sound correct > tho

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-16 Thread Matus UHLAR - fantomas
On 14.02.10 18:30, Andres Salazar wrote: > Iam trying to configure SSLbump so that I can use squid in transparent > mode and redirect with iptables/pf port 443 and 80 to squid. Are you aware of all security concerns when intercepting HTTPS connections? ...I just wonder when will first proactive a

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-16 Thread K K
On Tue, Feb 16, 2010 at 7:17 AM, Matus UHLAR - fantomas wrote: > On 14.02.10 18:30, Andres Salazar wrote: >> Iam trying to configure SSLbump so that I can use squid in transparent >> mode and redirect with iptables/pf port 443 and 80 to squid. Why transparent? > Are you aware of all security co

Re: [squid-users] SSLBump, help to configure for 3.1.0.16

2010-02-18 Thread Matus UHLAR - fantomas
> On Tue, Feb 16, 2010 at 7:17 AM, Matus UHLAR - fantomas > wrote: > > Are you aware of all security concerns when intercepting HTTPS connections? > > > > ...I just wonder when will first proactive admin (or someone from his > > managers) sent > > to prison because of breaking into users connecti