[squid-users] How to perform regex only after Squid knows the full url with SslBump

2020-03-20 Thread laviier
Hi, I have a use case that I want to access a certain URL path of a domain but not other. i.e. I want client to be able to access example.com/abc/login, but not other paths. Hence, I created ACL rule to achieve that, see below: ``` acl to_domain_whitelist url_regex

Re: [squid-users] How to Configure Proxy Chaining with ssl-bump

2020-03-20 Thread Michael Chen
Hi Amos, Thanks for your explanation. Could you instruct me how to install squid v5 based on CentOS 7? Based on url https://wiki.squid-cache.org/SquidFaq/BinaryPackages#KnowledgeBase.2FCentOS.Stable_Repository_Package_.28like_epel-release.29, CentOS seems not support squid v5. BR, Michael Amos

Re: [squid-users] How to Configure Proxy Chaining with ssl-bump

2020-03-20 Thread Amos Jeffries
On 20/03/20 8:27 pm, Michael Chen wrote: > Hi Amos, > May I know which function Squid v3.5.28 cannot do for my scenario? > Because Squid v3.5 still has command of cache_peer and ssl . > TLS is a volatile environment, with many changes going on constantly. Squid-3 has been deprecated since

Re: [squid-users] How to Configure Proxy Chaining with ssl-bump

2020-03-20 Thread Michael Chen
Hi Amos, May I know which function Squid v3.5.28 cannot do for my scenario? Because Squid v3.5 still has command of cache_peer and ssl . BR, Michael Amos Jeffries 於 2020年3月20日 週五 下午2:46寫道: > On 20/03/20 7:12 pm, Michael Chen wrote: > > Hi Amos, > > Squid version 3.5.28 > > Squid-3 cannot

Re: [squid-users] How to Configure Proxy Chaining with ssl-bump

2020-03-20 Thread Amos Jeffries
On 20/03/20 7:12 pm, Michael Chen wrote: > Hi Amos, > Squid version 3.5.28 Squid-3 cannot do what you are wanting. You require Squid-4 or later if the peer supports TLS/SSL connections, and Squid-5 or later if it does not. > image.png > BR, > Michael > Please avoid posting things images.