[squid-users] unexpected debug output

2016-11-16 Thread senor
I discovered that 'squid -k rotate' toggles cache.log output into full debug mode as if I had done 'squid -k debug'. Execute a second rotate and it toggles debug off. This only happens when I have an ecap adapter configured. Comment out those lines and everything works as expected. My question

Re: [squid-users] Error negotiating SSL

2016-11-16 Thread Amos Jeffries
On 17/11/2016 5:58 a.m., piequiex wrote: >> On Mon, 2016-11-14 at 16:12 +, piequiex wrote: >>> What mean this error and how to fix it? >>> Error negotiating SSL on FD 29: >>> error::lib(0):func(0):reason(0) (5/-1/104) >>> Error negotiating SSL on FD 30: >>> error::lib(0):func(0)

Re: [squid-users] clt_conn_tag and url_rewrite_program

2016-11-16 Thread David Touzeau
On 17/11/2016 1:50 a.m., David Touzeau wrote: > > > Hi, > > I have my own redirector and i want to play with the clt_conn_tag but > i encounter some issues ( perhaps for misunderstanding ) > > url_rewrite_program /usr/share/artica-postfix/filter.py > url_rewrite_children 10 startup=1 idle=1 co

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Patrick Chemla
Many Thanks Alex. I will try in the next hours and let you if I am successful. Patrick Le 16/11/2016 à 20:04, Alex Crow a écrit : On 16/11/16 17:33, Patrick Chemla wrote: Thanks for your answers, I am not doing anything illegal, I am trying to build a performant platform. I have a big serv

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Alex Crow
On 16/11/16 17:33, Patrick Chemla wrote: > Thanks for your answers, I am not doing anything illegal, I am trying to > build a performant platform. > > I have a big server running about 10 different websites. > > I have on this server virtual machines, each specialized for one-some > websites, a

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Patrick Chemla
Thanks for your answers, I am not doing anything illegal, I am trying to build a performant platform. I have a big server running about 10 different websites. I have on this server virtual machines, each specialized for one-some websites, and squid help me to send the traffic to the destinatio

Re: [squid-users] Error negotiating SSL

2016-11-16 Thread piequiex
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > On Mon, 2016-11-14 at 16:12 +, piequiex wrote: > > What mean this error and how to fix it? > > Error negotiating SSL on FD 29: > > error::lib(0):func(0):reason(0) (5/-1/104) > > Error negotiating SSL on FD 30: > > error::lib(0):fu

Re: [squid-users] clt_conn_tag and url_rewrite_program

2016-11-16 Thread Amos Jeffries
On 17/11/2016 1:50 a.m., David Touzeau wrote: > > > Hi, > > I have my own redirector and i want to play with the clt_conn_tag but i > encounter some issues ( perhaps for misunderstanding ) > > url_rewrite_program /usr/share/artica-postfix/filter.py > url_rewrite_children 10 startup=1 idle=1 co

[squid-users] clt_conn_tag and url_rewrite_program

2016-11-16 Thread David Touzeau
Hi, I have my own redirector and i want to play with the clt_conn_tag but i encounter some issues ( perhaps for misunderstanding ) url_rewrite_program /usr/share/artica-postfix/filter.py url_rewrite_children 10 startup=1 idle=1 concurrency=4 url_rewrite_extras "%>a/%>A %un %>rm myip=%la myport

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Amos Jeffries
On 16/11/2016 9:11 p.m., Patrick Chemla wrote: > Hi, > > I have same problem, and I need to use trusted CA certificates, so what > is the solution? Not to do illegal bad things that violate your contract with the CA. Any CA which lets you intercept traffic by generating sub-certificates with the

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Alex Crow
I'm not sure what you are trying to do. It sounds like you're running a reverse proxy, which has nothing to do with SSL bump or peek/splice. -- Sent from my Android device with K-9 Mail. Please excuse my brevity. -- This message is intended only for the addressee and may contain confidential info

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Alex Crow
That's why you gain their consent when they sign their employment contract. -- Sent from my Android device with K-9 Mail. Please excuse my brevity. -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its cont

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Patrick Chemla
Hi, I have same problem, and I need to use trusted CA certificates, so what is the solution? I have a squid 3.5.20 used for multiple domains, multiple backends, using both HTTP and HTTPS. Actually, the HTTP configuration is OK, the backends are OK with HTTPS, trusted certificates, verified