Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
You r welcome ;) 08.09.2017 5:25, L A Walsh пишет: > Yuri wrote: > Check all CA's chain. It is possible your root CA's bundle not complete.   >>> --- >>>    Likely problem... > > > Fixed as per URL: > > >> I use this URL: >>

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread L A Walsh
Yuri wrote: Check all CA's chain. It is possible your root CA's bundle not complete. --- Likely problem... Fixed as per URL: I use this URL: https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt and working now... Thanks! Linda

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Amos Jeffries
On 08/09/17 09:52, Yuri wrote: 08.09.2017 3:49, Yuri пишет: 08.09.2017 3:46, L A Walsh пишет: Yuri wrote: But in addition I'm using Squid 5.x with working cert's downloader ;) :^/  --- hmmm and I'm not even running 4.x... *ouch*... 3.5.26 (last known) works with relatively

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
08.09.2017 3:49, Yuri пишет: > > 08.09.2017 3:46, L A Walsh пишет: >> Yuri wrote: >>> Ops, >>> >>> miss end of message :) >>>   >> --- >>    I did search first! ;^) >> >> >> >>> Check all CA's chain. It is possible your root CA's bundle not complete. >>>   >> --- >>    Likely problem... >>

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
08.09.2017 3:46, L A Walsh пишет: > Yuri wrote: >> Ops, >> >> miss end of message :) >>   > --- >    I did search first! ;^) > > > >> Check all CA's chain. It is possible your root CA's bundle not complete. >>   > --- >    Likely problem... > > >> I usually use root CA's from Mozilla

Re: [squid-users] Looking for assistance with setting up a TLS proxy

2017-09-07 Thread Amos Jeffries
On 08/09/17 07:28, Rohit Sodhia wrote: Greetings, I'm a backend dev who's been suddenly assigned a task to create a squid proxy to intercept cURL/wget requests. We've got old servers that don't support TLS 1.2 and some of the services we use will be requiring it soon, so the decision was

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread L A Walsh
Yuri wrote: Ops, miss end of message :) --- I did search first! ;^) Check all CA's chain. It is possible your root CA's bundle not complete. --- Likely problem... I usually use root CA's from Mozilla (added to squid.conf as one file) and own self-supported intermediate

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
Hi, Raf. Just checking on two my servers - works like charm without any movings :) I'm already have good intermediate CA's bundle :) 08.09.2017 3:42, Rafael Akchurin пишет: > Hello LA, Yuri, > > The server analysis at > https://www.ssllabs.com/ssltest/analyze.html?d=help.ea.com=52.0.220.87 >

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Rafael Akchurin
Hello LA, Yuri, The server analysis at https://www.ssllabs.com/ssltest/analyze.html?d=help.ea.com=52.0.220.87 shows the certificate chain presented by the remote server is indeed incomplete, specifically the following certificate is not presented: --- Symantec Class 3 Secure Server CA - G4

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
Also. Symantec's root's can be already removed from most bundles (you should hear about it, is it?). So. May be can be required to add Symantec's root(s) manually to proxy root CA bundle. 08.09.2017 3:24, Yuri пишет: > Ops, > > miss end of message :) > > Check all CA's chain. It is possible

Re: [squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread Yuri
08.09.2017 3:14, L A Walsh пишет: > Got an error message from squid where I'm doing https-bumping: > > -- > The following error was encountered while trying to retrieve the URL: > https://help.ea.com/ > >    *Failed to establish a secure connection to 52.0.220.87* > > The

[squid-users] TLS: 1st time w/intermediate cert: not working; ideas on what I'm doing wrong?

2017-09-07 Thread L A Walsh
Got an error message from squid where I'm doing https-bumping: -- The following error was encountered while trying to retrieve the URL: https://help.ea.com/ *Failed to establish a secure connection to 52.0.220.87* The system returned: (71) Protocol error (TLS

[squid-users] Looking for assistance with setting up a TLS proxy

2017-09-07 Thread Rohit Sodhia
Greetings, I'm a backend dev who's been suddenly assigned a task to create a squid proxy to intercept cURL/wget requests. We've got old servers that don't support TLS 1.2 and some of the services we use will be requiring it soon, so the decision was made to route cURL and wget requests

Re: [squid-users] ipcCreate: fork: (12) Cannot allocate memory

2017-09-07 Thread Amos Jeffries
On 08/09/17 02:48, erdosain9 wrote: By the way, totalusedfree shared buff/cache available Mem: 3,7G3,0G122M 13M554M 422M Swap: 2,0G160M1,8G How much of that 3GB of RAM is Squid using?

Re: [squid-users] ipcCreate: fork: (12) Cannot allocate memory

2017-09-07 Thread Amos Jeffries
On 08/09/17 02:44, erdosain9 wrote: Hi to all. all was working fine.. but today Im having this issue 2017/09/07 11:34:49 kid1| Starting new negotiateauthenticator helpers... 2017/09/07 11:34:49 kid1| helperOpenServers: Starting 1/35 'negotiate_kerberos_auth' processes 2017/09/07 11:34:50 kid1|

Re: [squid-users] ipcCreate: fork: (12) Cannot allocate memory

2017-09-07 Thread erdosain9
By the way, totalusedfree shared buff/cache available Mem: 3,7G3,0G122M 13M554M 422M Swap: 2,0G160M1,8G -- Sent from:

[squid-users] ipcCreate: fork: (12) Cannot allocate memory

2017-09-07 Thread erdosain9
Hi to all. all was working fine.. but today Im having this issue 2017/09/07 11:34:49 kid1| Starting new negotiateauthenticator helpers... 2017/09/07 11:34:49 kid1| helperOpenServers: Starting 1/35 'negotiate_kerberos_auth' processes 2017/09/07 11:34:50 kid1| Starting new negotiateauthenticator

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-07 Thread Antony Stone
On Thursday 07 September 2017 at 16:34:02, SShukla wrote: > Thanks for replying Antony > > So one requirement for our solution is that, a user in a group using our > setup would have their traffic always pass through our proxy(Squid proxy + > ICAP), whether they are in their office on the

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-07 Thread SShukla
Thanks for replying Antony So one requirement for our solution is that, a user in a group using our setup would have their traffic always pass through our proxy(Squid proxy + ICAP), whether they are in their office on the company network, or at home on their own internet, or anywhere else using

Re: [squid-users] cache config

2017-09-07 Thread Amos Jeffries
On 07/09/17 01:26, Alex Gutiérrez Martínez wrote: Hi everyone, i have 100 GB on my cache partition, but squid only use 1.5 GB. My internet connection its incredibly slow, any advice on how optimize my connection will be appreciated. You are missing details of; * what Squid version you are

Re: [squid-users] How to setup squid as reverse proxy to intercept Office365 traffic

2017-09-07 Thread Antony Stone
On Wednesday 06 September 2017 at 19:34:15, SShukla wrote: > * Why do you want to set up a *reverse* proxy for Office 365 traffic? * > > We need to use reverse proxy to direct the traffic going to Office 365 > through an ICAP Server. I still don't understand why you think this needs to be a