Re: [squid-users] Does Squid support client ssl termination?

2022-10-26 Thread Grant Taylor
On 10/26/22 10:43 AM, mingheng wang wrote: Hello all, Hi,   Since ssl_bump can generate self signed certificates on the fly, I wonder if this setup is possible, or even just in theory: clients with necessary root CA installed connect to a local Squid. With ssl_bump and self signed certs,

[squid-users] Does Squid support client ssl termination?

2022-10-26 Thread mingheng wang
Hello all, Since ssl_bump can generate self signed certificates on the fly, I wonder if this setup is possible, or even just in theory: clients with necessary root CA installed connect to a local Squid. With ssl_bump and self signed certs, it always talks with the clients over HTTPS, making

Re: [squid-users] ACL based DNS server list

2022-10-26 Thread Alex Rousskov
On 10/25/22 21:27, Sneaker Space LTD wrote: Is there a way to use specific DNS servers based on the user or connecting IP address that is making the connection by using acls or any other method? If so, can someone send an example. One can write an external ACL helper that will use whatever

Re: [squid-users] Empty transfer-encoding header causes 502 response

2022-10-26 Thread Alex Rousskov
On 10/25/22 20:55, Matthew H wrote: I have included the requested output from tcpdump below: Thank you! This raw output is sufficient to determine that no transfer encoding was used by this buggy origin server. I have updated the GitHub comment/summary accordingly. N.B. In the future,

Re: [squid-users] ACL based DNS server list

2022-10-26 Thread Odhiambo Washington
On Wed, Oct 26, 2022 at 4:27 AM Sneaker Space LTD wrote: > Hello, > > Is there a way to use specific DNS servers based on the user or connecting > IP address that is making the connection by using acls or any other method? > If so, can someone send an example. > If you are using BIND, you can