Re: [squid-users] transparent mode squid on centos 9 with iptables (part 2)

2022-11-19 Thread Amos Jeffries
On 20/11/2022 10:10 am, ngtech1ltd wrote: Hey, CentOS 9 is mainly uses nftables when possible. I have not seen any example of squid intercept examples with nftables. iptables has for many years been a wrapper converting its command-line into nftables messages internally. So all Squid config e

Re: [squid-users] transparent mode squid on centos 9 with iptables (part 2)

2022-11-19 Thread ngtech1ltd
Hey, CentOS 9 is mainly uses nftables when possible. I have not seen any example of squid intercept examples with nftables. If for any reason the iptables command would not work on CentOS 9 (stream) let me know and I might be able to provide these. Eliezer Eliezer Croitoru NgTech, Tech Sup

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread David Touzeau
Thanks Amos for this clarification, We also have the same needs and indeed, we face with the same approach. It is possible that the structure of Squid could not, in some cases, recovering this type of information. Although the concept of a proxy is neither more nor less than a big browser that

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread David Touzeau
Thanks Amos for this clarification, We also have the same needs and indeed, we face with the same approach. It is possible that the structure of Squid could not, in some cases, recovering this type of information. Although the concept of a proxy is neither more nor less than a big browser that

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread ngtech1ltd
Hey Fred, Just a tiny question, can you share this php script so we can make sense of what is this script doing compared to what squid is doing? Thanks, Eliezer Eliezer Croitoru NgTech, Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com Web: https://ngtech.co.il/ My-Tube: htt

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread Amos Jeffries
On 20/11/2022 2:43 am, UnveilTech - Support wrote: Hi Amos, Quick update... A 10 lines PHP helper is able to catch the SHA1 key with a basis "openssl_x509_fingerprint" function when Squid, a 1 million lines product, could not be able ? The question-conclusion you have reached is ridiculous..

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread Amos Jeffries
On 19/11/2022 2:55 am, UnveilTech - Support wrote: Hi Amos, We have tested with a "ssl_bump bump" ("ssl_bump all" and "ssl_bump bump sslstep1"), it does not solve the problem. According to Alex, we can also confirm it's a bug with Squid 5.x and TLS 1.3. Okay. It seems Squid is only compatib

Re: [squid-users] does squid 5.7 support HTTP/2 protocol

2022-11-19 Thread Alex Rousskov
On 11/18/22 09:23, Dieter Bloms wrote: does squid 5.7 support the HTTP/2.0 protocol? No, Squid v5 does not. Most likely, Squid v6 will not support HTTP/2+ either. I hope to see HTTP/2+ support in v7, but current Squid Project deficiencies make that a toll order. FWIW, last time I checked,

Re: [squid-users] Squid 5: server_cert_fingerprint not working fine...

2022-11-19 Thread UnveilTech - Support
Hi Amos, Quick update... A 10 lines PHP helper is able to catch the SHA1 key with a basis "openssl_x509_fingerprint" function when Squid, a 1 million lines product, could not be able ? Samples from the helper: apple.com tls1.3, SHA1: "7B:B1:94:4F:56:5D:7D:64:A1:45:5C:91:E5:BA:0C:EA:D9:FB:91:50