Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Rousskov
On 03/09/2016 08:38 PM, Alex Samad wrote: >>> I am not sure how haveServerName is constructed >> It is up to the Squid admin. > I'm the squid admin. I am presuming maybe wrongly that this is test to > see if squid has worked out a serverName. Yeah. Ideally, haveServerName should match when

Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Samad
On 10 March 2016 at 14:17, Alex Rousskov wrote: >> >> I am not sure how haveServerName is constructed > > It is up to the Squid admin. Thanks for the replay to the other stuff I'm the squid admin. I am presuming maybe wrongly that this is test to see if squid

Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Rousskov
On 03/09/2016 08:00 PM, Alex Samad wrote: > from http://wiki.squid-cache.org/Features/SslPeekAndSplice > > # Better safe than sorry: > # Terminate all strange connections. > ssl_bump splice serverIsBank > ssl_bump bump haveServerName > ssl_bump peek all > ssl_bump terminate all > > I am not sure

[squid-users] question about ssl_bump

2016-03-09 Thread Alex Samad
from http://wiki.squid-cache.org/Features/SslPeekAndSplice # Better safe than sorry: # Terminate all strange connections. ssl_bump splice serverIsBank ssl_bump bump haveServerName ssl_bump peek all ssl_bump terminate all I am not sure how haveServerName is constructed I read this as 1) splice