Hi all,
I am using squid 5.7 on Debian Bookworm, and would like to setup a
transparent + SSL bump proxy.
Tried the example below, but squid failed to start when https_port
having "intercept ssl-bump"
https://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit
Anyone can point to the right direction ?
Thanks a lot.
John MOK
Squid Cache: Version 5.7
Service Name: squid
Debian linux
This binary uses OpenSSL 3.0.13 30 Jan 2024. configure options:
'--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include'
'--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info'
'--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking'
'--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu'
'--runstatedir=/run' '--disable-maintainer-mode'
'--disable-dependency-tracking' 'BUILDCXXFLAGS=-g -O2
-ffile-prefix-map=/usr/local/src/squid/squid-5.7=. -fstack-protector-strong
-Wformat -Werror=format-security -Wno-error=deprecated-declarations -Wdate-time
-D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now ' 'BUILDCXX=g++'
'--with-build-environment=default' '--enable-build-info=Debian linux'
'--datadir=/usr/share/squid' '--sysconfdir=/etc/squid'
'--libexecdir=/usr/lib/squid' '--mandir=/usr/share/man' '--enable-inline'
'--disable-arch-native' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client'
'--enable-follow-x-forwarded-for'
'--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB'
'--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper'
'--enable-auth-ntlm=fake,SMB_LM'
'--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,time_quota,unix_group,wbinfo_group'
'--enable-security-cert-validators=fake'
'--enable-storeid-rewrite-helpers=file' '--enable-url-rewrite-helpers=fake'
'--enable-eui' '--enable-esi' '--enable-icmp' '--enable-zph-qos'
'--enable-ecap' '--disable-translation' '--with-swapdir=/var/spool/squid'
'--with-logdir=/var/log/squid' '--with-pidfile=/run/squid.pid'
'--with-filedescriptors=65536' '--with-large-files' '--with-openssl'
'--with-default-user=proxy' '--enable-linux-netfilter' '--with-systemd'
'--with-gnutls' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2
-ffile-prefix-map=/usr/local/src/squid/squid-5.7=. -fstack-protector-strong
-Wformat -Werror=format-security -Wno-error=deprecated-declarations'
'LDFLAGS=-Wl,-z,relro -Wl,-z,now ' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'
'CXXFLAGS=-g -O2 -ffile-prefix-map=/usr/local/src/squid/squid-5.7=.
-fstack-protector-strong -Wformat -Werror=format-security
-Wno-error=deprecated-declarations'
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users
