Re: [squid-users] Squid with SSL-Bump on Debian testing: SSL_ERROR_RX_RECORD_TOO_LONG

2017-03-03 Thread Yuri Voinov
04.03.2017 3:29, C. L. Martinez пишет: > Hi all, > > After installing Squid 3.5.24 in my Debian testing (many thanks Amos for > your help), I am trying to configure Squid as https intercept proxy. My > config actually is: > > http_port 127.0.0.1:8080 > http_port 127.0.0.1:8081 intercept >

[squid-users] Squid with SSL-Bump on Debian testing: SSL_ERROR_RX_RECORD_TOO_LONG

2017-03-03 Thread C. L. Martinez
Hi all, After installing Squid 3.5.24 in my Debian testing (many thanks Amos for your help), I am trying to configure Squid as https intercept proxy. My config actually is: http_port 127.0.0.1:8080 http_port 127.0.0.1:8081 intercept http_port 127.0.0.1:8082 ssl-bump

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Alex Rousskov
On 03/03/2017 08:41 AM, sothy shan wrote: > On Fri, Mar 3, 2017 at 4:29 PM, Alex Rousskov wrote: > > On 03/03/2017 04:59 AM, Matus UHLAR - fantomas wrote: > > On 03.03.17 10:02, sothy shan wrote: > >> I am trying to test reverse proxy with HTTPS. For example, client makes > >>

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Amos Jeffries
On 4/03/2017 4:58 a.m., sothy shan wrote: > I changed the configuration > > http_port 192.168.1.69:80 accel defaultsite=www.A.com > cache_peer 192.168.1.31 parent 80 0 no-query originserver > > > http_access allow all >

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread sothy shan
On Fri, Mar 3, 2017 at 4:55 PM, Amos Jeffries wrote: > On 4/03/2017 3:53 a.m., sothy shan wrote: > > On Fri, Mar 3, 2017 at 2:56 PM, Matus UHLAR - fantomas < > uh...@fantomas.sk> > > wrote: > > > >> On 03.03.17 10:02, sothy shan wrote: > > > I am trying to test

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread Alex Rousskov
On 03/03/2017 06:17 AM, Eliezer Croitoru wrote: > one of the options is to fence the ssl_crtd with some kind of lock > mechanism for the DB rebuild time. ssl_crtd already has a lock mechanism. If that mechanism is buggy, it needs to be fixed, but it does not make sense to add another one. There

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Amos Jeffries
On 4/03/2017 3:53 a.m., sothy shan wrote: > On Fri, Mar 3, 2017 at 2:56 PM, Matus UHLAR - fantomas > wrote: > >> On 03.03.17 10:02, sothy shan wrote: > I am trying to test reverse proxy with HTTPS. For example, client makes > HTTPS request to squid server which

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread sothy shan
On Fri, Mar 3, 2017 at 4:29 PM, Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 03/03/2017 04:59 AM, Matus UHLAR - fantomas wrote: > > On 03.03.17 10:02, sothy shan wrote: > >> I am trying to test reverse proxy with HTTPS. For example, client makes > >> HTTPS request to squid server

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Alex Rousskov
On 03/03/2017 04:59 AM, Matus UHLAR - fantomas wrote: > On 03.03.17 10:02, sothy shan wrote: >> I am trying to test reverse proxy with HTTPS. For example, client makes >> HTTPS request to squid server which make another HTTPS request to web >> server. > what point does this have, except disabling

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread sothy shan
On Fri, Mar 3, 2017 at 2:56 PM, Matus UHLAR - fantomas wrote: > On 03.03.17 10:02, sothy shan wrote: >>> I am trying to test reverse proxy with HTTPS. For example, client makes HTTPS request to squid server which make another HTTPS request to web server.

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Matus UHLAR - fantomas
On 03.03.17 10:02, sothy shan wrote: I am trying to test reverse proxy with HTTPS. For example, client makes HTTPS request to squid server which make another HTTPS request to web server. On Fri, Mar 3, 2017 at 12:59 PM, Matus UHLAR - fantomas wrote: what point does this

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread Eliezer Croitoru
Lets hope for the best. When you will be with 3.5.24 we would be able to handle things in a simpler manner. There are couple options to handle a situation like this and one of the options is to fence the ssl_crtd with some kind of lock mechanism for the DB rebuild time. For example a bash

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread sothy shan
On Fri, Mar 3, 2017 at 12:59 PM, Matus UHLAR - fantomas wrote: > On 03.03.17 10:02, sothy shan wrote: > >> I am trying to test reverse proxy with HTTPS. For example, client makes >> HTTPS request to squid server which make another HTTPS request to web >> server. >> > > what

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread Yuri Voinov
03.03.2017 18:20, --Ahmad-- пишет: > @ eliezer > i was using children as 10 > ans faced the problem > > > so i trued to increase children to 1000 to see if this was the reason > and unfortunately the same problem . > > ys I’m using debian 6 os . > > i appreciable the helping from all the

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread --Ahmad--
@ eliezer i was using children as 10 ans faced the problem so i trued to increase children to 1000 to see if this was the reason and unfortunately the same problem . ys I’m using debian 6 os . i appreciable the helping from all the replies below but so far i havent got any clear solution .

Re: [squid-users] Reverse proxy with HTTPS

2017-03-03 Thread Matus UHLAR - fantomas
On 03.03.17 10:02, sothy shan wrote: I am trying to test reverse proxy with HTTPS. For example, client makes HTTPS request to squid server which make another HTTPS request to web server. what point does this have, except disabling client certificates? -- Matus UHLAR - fantomas,

Re: [squid-users] squid 3.5.2==> HTTPS FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

2017-03-03 Thread Yuri Voinov
03.03.2017 6:32, Eliezer Croitoru пишет: > Hey Yuri, > > This issue is not 100% squid but I think it's related to the way ssl_crtd > works. > I am not sure if it has some locking or other things to prevent such issues. > The first solution is to somehow defend the DB from corruption, like in a

Re: [squid-users] squid-users Digest, Vol 31, Issue 9

2017-03-03 Thread Yuri Voinov
tate 2 > >>> max_filedescriptors 131072 > >>> ### > >>> > >>> cache_dir aufs /var/cache/squid 60 64 128 > >>> ### > >>> http

[squid-users] Reverse proxy with HTTPS

2017-03-03 Thread sothy shan
Hello, I am trying to test reverse proxy with HTTPS. For example, client makes HTTPS request to squid server which make another HTTPS request to web server. To test the scenario, what setup I need to do? If u have any document , please share me or point me key step. However, after reading on

Re: [squid-users] Username not passed to url_rewrite_program

2017-03-03 Thread Amon Ott
Hi Eliezer! Am 02.03.2017 um 22:47 schrieb Eliezer Croitoru: > It's not clear what the issue is to me yet. > The current bug report is: > http://bugs.squid-cache.org/show_bug.cgi?id=4679 > > From the cache logs what I see is that squid sends: > "2017/03/02 13:49:27.799 kid1| 61,6|