Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-11-04 Thread Christos Tsantilas
The SQUID-211-Skype_groups_and_msnp_bypass-t11.patch applied to trunk as r14913 The SQUID-211-FwdState_connectStart_cleanup-t1.patch patch applied as r14914 The final applied patch has one more change over the t10 patch, it merges the ConnStateData::startPeekAndSplice() and

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-11-01 Thread Amos Jeffries
On 2/11/2016 4:31 a.m., Christos Tsantilas wrote: > On 10/28/2016 01:11 PM, Amos Jeffries wrote: >> On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: >>> >>> Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. >>> >>> Use case: Skype groups appear to use TLS-encrypted MSNP protocol

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-11-01 Thread Christos Tsantilas
On 10/28/2016 01:11 PM, Amos Jeffries wrote: On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. Use case: Skype groups appear to use TLS-encrypted MSNP protocol instead of HTTPS. This change allows Squid admins using SslBump

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-29 Thread Amos Jeffries
On 29/10/2016 4:07 a.m., Alex Rousskov wrote: > On 10/28/2016 07:54 AM, Christos Tsantilas wrote: >> On 10/28/2016 01:11 PM, Amos Jeffries wrote: >>> On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. > >>> Are any of these

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-28 Thread Alex Rousskov
On 10/28/2016 07:54 AM, Christos Tsantilas wrote: > On 10/28/2016 01:11 PM, Amos Jeffries wrote: >> On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: >>> Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. >> Are any of these additional fixes able to be easily broken out into >>

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-28 Thread Christos Tsantilas
On 10/28/2016 01:11 PM, Amos Jeffries wrote: On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. Use case: Skype groups appear to use TLS-encrypted MSNP protocol instead of HTTPS. This change allows Squid admins using SslBump

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-28 Thread Amos Jeffries
On 21/10/2016 3:55 a.m., Christos Tsantilas wrote: > > Support tunneling of bumped non-HTTP traffic. Other SslBump fixes. > > Use case: Skype groups appear to use TLS-encrypted MSNP protocol instead > of HTTPS. This change allows Squid admins using SslBump to tunnel Skype > groups and similar

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-20 Thread Christos Tsantilas
I am attaching new patch. On 10/19/2016 07:13 PM, Alex Rousskov wrote: On 10/19/2016 08:49 AM, Christos Tsantilas wrote: I am attaching a new patch. I would like to discuss two issues: * Logging of scheme-less URLs This is defines a new proto the PROTO_TCP, and for this prints the url

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-19 Thread Christos Tsantilas
On 10/19/2016 07:13 PM, Alex Rousskov wrote: On 10/19/2016 08:49 AM, Christos Tsantilas wrote: I am attaching a new patch. I would like to discuss two issues: * Logging of scheme-less URLs This is defines a new proto the PROTO_TCP, and for this prints the url in the form host:port. The

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-19 Thread Alex Rousskov
On 10/19/2016 08:49 AM, Christos Tsantilas wrote: > I am attaching a new patch. I would like to discuss two issues: * Logging of scheme-less URLs > This is defines a new proto the PROTO_TCP, and for this prints the url > in the form host:port. The PROTO_TCP name sounds bad because we may want

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-19 Thread Christos Tsantilas
I am attaching a new patch. This is defines a new proto the PROTO_TCP, and for this prints the url in the form host:port. There are no other changes from t8 patch. On 10/18/2016 08:52 AM, Alex Rousskov wrote: On 10/17/2016 10:56 PM, Amos Jeffries wrote: On 18/10/2016 7:54 a.m., Christos

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-17 Thread Alex Rousskov
On 10/17/2016 10:56 PM, Amos Jeffries wrote: > On 18/10/2016 7:54 a.m., Christos Tsantilas wrote: >> On 10/17/2016 05:42 PM, Alex Rousskov wrote: >>> On 10/17/2016 01:57 AM, Christos Tsantilas wrote: On 10/14/2016 02:30 PM, Marcus Kool wrote: > Squid sends the following line to the URL

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-17 Thread Amos Jeffries
On 18/10/2016 7:54 a.m., Christos Tsantilas wrote: > On 10/17/2016 05:42 PM, Alex Rousskov wrote: >> On 10/17/2016 01:57 AM, Christos Tsantilas wrote: >>> On 10/14/2016 02:30 PM, Marcus Kool wrote: Squid sends the following line to the URL rewriter: (unknown)://173.194.76.188:443 / -

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-17 Thread Christos Tsantilas
On 10/17/2016 05:42 PM, Alex Rousskov wrote: On 10/17/2016 01:57 AM, Christos Tsantilas wrote: On 10/14/2016 02:30 PM, Marcus Kool wrote: Squid sends the following line to the URL rewriter: (unknown)://173.194.76.188:443 / - NONE Squid generates internally request to serve the non-HTTP

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-17 Thread Christos Tsantilas
On 10/14/2016 02:30 PM, Marcus Kool wrote: I started testing this patch and observed one unwanted side effect of this patch: When a client connects to mtalk.google.com, Squid sends the following line to the URL rewriter: (unknown)://173.194.76.188:443 / - NONE Thank you. I should have refer on

Re: [squid-dev] [PATCH] Support tunneling of bumped non-HTTP traffic. Other SslBump fixes.

2016-10-14 Thread Marcus Kool
I started testing this patch and observed one unwanted side effect of this patch: When a client connects to mtalk.google.com, Squid sends the following line to the URL rewriter: (unknown)://173.194.76.188:443 / - NONE Marcus Quoting Christos Tsantilas : Use case: Skype