Re: [squid-users] Is there a way on client to show proxy's certificate?
On 21/12/19 7:02 pm, GeorgeShen wrote: >> The same openssl command can connect to any type of TLS server. > > True. But the proxy server may not run normal TLS service or listen on the > port 443. > The proxy with SSL-Bump is listening on the 3129 for example, I have > certainly tried: > > openssl s_client -connect proxy-server-ip:3129 -showcert > > and that does not work. I'm just say the proxy server may not also run a > normal TLS service. Squid only supports normal TLS service. If the above command is not producing proper TLS details that is the problem. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is there a way on client to show proxy's certificate?
> The same openssl command can connect to any type of TLS server. True. But the proxy server may not run normal TLS service or listen on the port 443. The proxy with SSL-Bump is listening on the 3129 for example, I have certainly tried: openssl s_client -connect proxy-server-ip:3129 -showcert and that does not work. I'm just say the proxy server may not also run a normal TLS service. thanks. George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is there a way on client to show proxy's certificate?
On 21/12/19 6:27 pm, GeorgeShen wrote: > Running a client program through a proxy server, and I was given the proxy's > root CA certificate file. When applied, got the error on the program: "x509: > certificate signed by unknown authority". Now I'm wondering if the so called > "proxy's root CA cert" is given correctly. > > I now for openssl, I can do "openssl s_client -connect remote-host:443 > -showcert" to show the chain of server's CAs, is there a way to use the > openssl to show what is the CA on the proxy server? or is there someway to > find this out? The same openssl command can connect to any type of TLS server. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] Is there a way on client to show proxy's certificate?
Running a client program through a proxy server, and I was given the proxy's root CA certificate file. When applied, got the error on the program: "x509: certificate signed by unknown authority". Now I'm wondering if the so called "proxy's root CA cert" is given correctly. I now for openssl, I can do "openssl s_client -connect remote-host:443 -showcert" to show the chain of server's CAs, is there a way to use the openssl to show what is the CA on the proxy server? or is there someway to find this out? thanks. George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] squid log analyzer
Hello Vacheslav, We are building something like sarg/squidanalyzer/lightsquid in web safety 7.2. See https://docs.diladele.com/administrator_guide_develop/traffic_monitoring/index.html It shall be easy to grab the virtual appliance, upload your Squid logs into /var/log/squid and see if the results are ok. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Vacheslav Sent: Friday, 20 December 2019 11:05 To: squid-users@lists.squid-cache.org Subject: [squid-users] squid log analyzer i searched for a ufdb guard log analyzer and it was like looking for aliens..so i settled for squid log analyzers..i tried calimaris which reminded me that squid is translated to kalmar in Russian but the version on opensuse does not provide what user went to where..i read about lots of options..many are stopped from being updated, others require too much setup and finally i saw sarg! almost everyone was bashing it as slow and try this instead..but it promised to show which user visited what url, so i installed it and tried it from command line and it was fast but it failed to create the index file in the configured folder so couldn't see the html results.. i suffered all day reading this and that and experimenting and it was useless, so i tired reaching for help on their forum and it is like i visited a ghost town.. so who has tried something similar to do this that is working? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] squid log analyzer
i searched for a ufdb guard log analyzer and it was like looking for aliens..so i settled for squid log analyzers..i tried calimaris which reminded me that squid is translated to kalmar in Russian but the version on opensuse does not provide what user went to where..i read about lots of options..many are stopped from being updated, others require too much setup and finally i saw sarg! almost everyone was bashing it as slow and try this instead..but it promised to show which user visited what url, so i installed it and tried it from command line and it was fast but it failed to create the index file in the configured folder so couldn't see the html results.. i suffered all day reading this and that and experimenting and it was useless, so i tired reaching for help on their forum and it is like i visited a ghost town.. so who has tried something similar to do this that is working? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is Squid 4.9 gone?
On 20/12/19 10:21 pm, netadmin wrote: > "No, 4.9 was available on squid-cache.org some time ago :-)" > > Squid 4.8 is still here > http://www.squid-cache.org/Versions/ I sent my response minutes after doing the update on our master server. The www.* servers take 2-12hrs to receive updates. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] Is Squid 4.9 gone?
"No, 4.9 was available on squid-cache.org some time ago :-)" Squid 4.8 is still here http://www.squid-cache.org/Versions/ ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is Squid 4.9 gone?
Ah.. it shows Amos is human also.. :-) If you need squid 4.9 in debian Buster (10) package. These are the package i currently provide on/for Debian Buster. Squid 4.9 with ssl enabled settings. Package list: https://apt.van-belle.nl/current-packages-in-buster-squid49-apt.txt (included also, squidclamav, packaged into : c-icap-module-squidclamav ) My repo setup. 1) Choose http or https for you apt, both work, for https you need to : apt-get install apt-transport-https 2) Import my public key wget -O - http://apt.van-belle.nl/louis-van-belle.gpg-key.asc | apt-key add - 3) setup the repo. echo "deb http://apt.van-belle.nl/debian buster-squid49 main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list General info, : https://apt.van-belle.nl Thank Amos and the squid dev team. I wish you guys the best, happy, healty and successfull year(s) to come. Greetz, Louis > -Oorspronkelijk bericht- > Van: squid-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens > Dmitry Melekhov > Verzonden: vrijdag 20 december 2019 10:11 > Aan: squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] Is Squid 4.9 gone? > > 20.12.2019 12:35, Amos Jeffries ??: > > On 20/12/19 9:03 pm, netadmin wrote: > >> At the address: > >> http://www.squid-cache.org/Versions/ > >> the latest version appears as 4.8 although I am running 4.9! > >> What happened to version 4.9? > > > > I'm not entirely certain what happened there. I suspect it > was just an > > oversight on my part not copying the files from the release > directory to > > the web server. That has now been corrected. > > > > As to why you could be running a version not available on > the www site; > > Vendors pull their release code from any one (or several) different > > sources we provide them - our public git repository, FTP servers, or > > rsync servers. > > No, 4.9 was available on squid-cache.org some time ago :-) > > > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is Squid 4.9 gone?
20.12.2019 12:35, Amos Jeffries пишет: On 20/12/19 9:03 pm, netadmin wrote: At the address: http://www.squid-cache.org/Versions/ the latest version appears as 4.8 although I am running 4.9! What happened to version 4.9? I'm not entirely certain what happened there. I suspect it was just an oversight on my part not copying the files from the release directory to the web server. That has now been corrected. As to why you could be running a version not available on the www site; Vendors pull their release code from any one (or several) different sources we provide them - our public git repository, FTP servers, or rsync servers. No, 4.9 was available on squid-cache.org some time ago :-) ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is Squid 4.9 gone?
Perfect Amos Sent from my iPhone > On Dec 20, 2019, at 11:35 AM, Amos Jeffries wrote: > > On 20/12/19 9:03 pm, netadmin wrote: >> >> At the address: >> http://www.squid-cache.org/Versions/ >> the latest version appears as 4.8 although I am running 4.9! >> What happened to version 4.9? > > > I'm not entirely certain what happened there. I suspect it was just an > oversight on my part not copying the files from the release directory to > the web server. That has now been corrected. > > As to why you could be running a version not available on the www site; > Vendors pull their release code from any one (or several) different > sources we provide them - our public git repository, FTP servers, or > rsync servers. > > Amos > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Is Squid 4.9 gone?
On 20/12/19 9:03 pm, netadmin wrote: > > At the address: > http://www.squid-cache.org/Versions/ > the latest version appears as 4.8 although I am running 4.9! > What happened to version 4.9? I'm not entirely certain what happened there. I suspect it was just an oversight on my part not copying the files from the release directory to the web server. That has now been corrected. As to why you could be running a version not available on the www site; Vendors pull their release code from any one (or several) different sources we provide them - our public git repository, FTP servers, or rsync servers. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] Is Squid 4.9 gone?
At the address: http://www.squid-cache.org/Versions/ the latest version appears as 4.8 although I am running 4.9! What happened to version 4.9? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
