Re: [squid-users] one site not working

2019-12-09 Thread Amos Jeffries
On 10/12/19 5:52 am, simon ben wrote: > Dear All, > >   > > I am using Squid version 3.5.2 on Centos  7 64 bit and its working fine > with no issue but recently got a complain from one user saying that the > below site Is not opening..  just says page cannot be displayed > That would be one iss

Re: [squid-users] Security concerns with using squidclient from a host separate from the server

2019-12-09 Thread Amos Jeffries
On 10/12/19 9:08 am, Tom Karches wrote: > Are there any security concerns with running squidclient anywhere except > on the local host? No more than with any HTTP software. Less than some. > I have been told that squidclient "exposes a lot of > data". Is that because transactions are passed over

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-09 Thread Amos Jeffries
On 10/12/19 6:46 pm, GeorgeShen wrote: > > I'm wondering if this issue reported last year is fixed: > http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-4-4-security-file-certgen-helpers-crashing-td4687098.html > That question implies that you are not using the latest Squid release, or you

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-09 Thread GeorgeShen
I'm wondering if this issue reported last year is fixed: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-4-4-security-file-certgen-helpers-crashing-td4687098.html or is there a work around. thanks. - George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users

[squid-users] one site not working using squid

2019-12-09 Thread simon ben
Dear All,   I am usingSquid version 3.5.2 on Centos  7 64 bit and its working fine with no issuebut recently got a complain from one user saying that the below site Is notopening..  just says page cannot be displayed   https://my.esri.com   but if I use a machine without squid itsworking f

[squid-users] Security concerns with using squidclient from a host separate from the server

2019-12-09 Thread Tom Karches
Are there any security concerns with running squidclient anywhere except on the local host? I have been told that squidclient "exposes a lot of data". Is that because transactions are passed over an insecure connection? If so, is there a workaround that solves this problem? Tom -- Thomas Karches

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-09 Thread GeorgeShen
Hi Alex, this time I tried, a little different, this is the log from got the server certs to colose the SSL with error, and at the end, it is also saying security_file_certgen crashes rapidly!!! below the output of log thanks. - George geyBC5spVGniTZ9g4/4EALHmrmP0d4vcbw0FJugljU7jWmdiUQEpoZZCov

[squid-users] one site not working

2019-12-09 Thread simon ben
Dear All,   I am usingSquid version 3.5.2 on Centos  7 64 bit and its working fine with no issuebut recently got a complain from one user saying that the below site Is notopening..  just says page cannot be displayed   https://my.esri.com   but if I use a machine without squid itsworking f

[squid-users] deny_info redirect with URL placeholder

2019-12-09 Thread Vieri Di Paola
Is there a way to tell squid to treat %o as-is in deny_info? In Apache2 with mod_proxy ProxyPass directives, I require to write a config directive such as: Header edit Location "(^http[s]?://)([^/]+)" "" Using %note or %o in squid 4.x or 3.x would be fine, but both have issues. The config parser

Re: [squid-users] Squid Proxy SSL Bump can not retrieve SSL session back to the client?

2019-12-09 Thread Alex Rousskov
On 12/8/19 1:53 AM, George Sheng wrote: > From the debug I can also see the proxy  connects towards the remote > server, and proxy has negotiated fine with the server. the proxy > receives 3 certificates from the server, > and verification was fine to the server. But when the proxy trying to > pro

Re: [squid-users] http://www1.ngtech.co.il/ - Down?

2019-12-09 Thread Rafał Stanilewicz
The mirror on http://linuxsoft.cern.ch/mirror/www1.ngtech.co.il/repo/ still works. HtH On Mon, 9 Dec 2019 at 10:42, Rudi Kramer wrote: > > Still no word on this issue? > > On Wed, 4 Dec 2019 at 08:17, Rudi Kramer wrote: >> >> Hello, >> >> As far as I can tell, http://www1.ngtech.co.il/ is down

Re: [squid-users] http://www1.ngtech.co.il/ - Down?

2019-12-09 Thread Rudi Kramer
Still no word on this issue? On Wed, 4 Dec 2019 at 08:17, Rudi Kramer wrote: > Hello, > > As far as I can tell, http://www1.ngtech.co.il/ is down at the moment. > > Any word on how long this will be? > > Thanks > Rudi > ___ squid-users mailing list squ

Re: [squid-users] deny_info redirect with URL placeholder

2019-12-09 Thread Vieri Di Paola
On Mon, Dec 9, 2019 at 10:04 AM Amos Jeffries wrote: > > > How could I refer to these values in the deny_info 302:%* line? > > deny_info 302:https:%o bad_Location > > This should do it for Squid-3 (and avoids the config parser bug). You > just have to have the helper produce the URL (without the

Re: [squid-users] deny_info redirect with URL placeholder

2019-12-09 Thread Vieri Di Paola
On Mon, Dec 9, 2019 at 10:04 AM Amos Jeffries wrote: > > > Is there a way to add a URL variable name to a deny_info 302 > > configuration directive? > > > > or as I showed > earlier with logformat codes. Though sorry that does require a later >

Re: [squid-users] deny_info redirect with URL placeholder

2019-12-09 Thread Amos Jeffries
On 9/12/19 8:49 pm, Vieri Di Paola wrote: > Hi, > > Is there a way to add a URL variable name to a deny_info 302 > configuration directive? > or as I showed earlier with logformat codes. Though sorry that does require a later Squid version tha