Re: [squid-users] Proxy Server closes the connection to http server before transferring all application data to http client

2020-12-14 Thread Amos Jeffries
On 15/12/20 4:21 pm, Zhang, Lily (USD) wrote: Hi I installed 4.13 squid proxy server. See attachment, http server (10.250.16.46) sends FIN, ACK to tells that response is finished.  Proxy server (10.244.102.133) sends FIN, ACK back to http server (10.250.16.46) before "Application Data" is

Re: [squid-users] Proxy Server closes the connection to http server before transferring all application data to http client

2020-12-14 Thread Zhang, Lily (USD)
Thanks Amos for your quick reply. Looks we can use "Connection: keep-alive" in http request to solve this issue. Thanks Lily -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Tuesday, December 15, 2020 3:47 PM To: squid-users@lists.squid-cache.org Subject: Re:

[squid-users] Proxy Server closes the connection to http server before transferring all application data to http client

2020-12-14 Thread Zhang, Lily (USD)
Hi I installed 4.13 squid proxy server. See attachment, http server (10.250.16.46) sends FIN, ACK to tells that response is finished. Proxy server (10.244.102.133) sends FIN, ACK back to http server (10.250.16.46) before "Application Data" is transferred to http client (10.245.166.20). Would

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Eliezer Croitor
Alex sorry, There is no connection between you or this sentence. I don't know why these things keep popping up while I'm sending emails. The AV should have blocked this proofing software from pasting things while I'm writing but, sometimes the desktop works in mysteries ways. ... Delete the

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Alex Rousskov
On 12/14/20 2:15 PM, Eliezer Croitor wrote: > I wrote a simple ruby helper but squid claims it crashes rapidly. > Since probably nobody else is willing to do some pipelining job I > assume it's on me... > I understand what you are saying/writing but from what I see some in > the market do not

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Eliezer Croitor
Hey Alex, Indeed the format is documented. However I didn't managed to use the wiki to understand how to parse a single transaction. I wrote a simple ruby helper but squid claims it crashes rapidly. Since probably nobody else is willing to do some pipelining job I assume it's on me... I will

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Alex Rousskov
On 12/14/20 1:55 PM, Eliezer Croitor wrote: > We can use this as an example for a single transaction in the wiki: > https://gist.githubusercontent.com/elico/a0397c879776336eeae569317015edc1/raw/b34dff8ece76e480007a950655efff3564af/cache.log > Let me know if it's enough to document this

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Eliezer Croitor
Seems to work: This one output stream. We can use this as an example for a single transaction in the wiki: https://gist.githubusercontent.com/elico/a0397c879776336eeae569317015edc1/raw/b34dff8ece76e480007a950655efff3564af/cache.log Let me know if it's enough to document this subject. Thanks,

Re: [squid-users] dhcp

2020-12-14 Thread Eliezer Croitor
Hey, I do not know exactly how and on what environment but usually it's done with a Radius server. Maybe with 802.x integration in the switch level to make sure that no one is un-accounted for in the network. Eliezer Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email:

Re: [squid-users] Adding header with destination IP to icap server via adaptation_meta

2020-12-14 Thread Alex Rousskov
On 12/14/20 8:29 AM, roie rachamim wrote: > I was trying to add the value via: > adaptation_meta X-PKuku-Dst-IP "% But in the ICAP server i can only see a dash (-) > Any issue with my configuration ? Probably not. Most likely, Squid did not know the destination IP address of the

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Alex Rousskov
On 12/14/20 4:26 AM, Eliezer Croitor wrote: > So starts with: > 0 cert_validate... line > And ends with?: > error_name_0=X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT > error_cert_0=cert0 > ? No. The size of the key=value block is specified on the first request line. Please try to follow documentation

Re: [squid-users] Adding header with destination IP to icap server via adaptation_meta

2020-12-14 Thread roie rachamim
In access.log this format indeed works On Mon, Dec 14, 2020, 18:24 Eliezer Croitor wrote: > Have you tried to use this format log in the logfomat? > > I do not remember by heart but I what I see is the docs is: > > http://www.squid-cache.org/Versions/v4/cfgman/logformat.html > > > > logformat

Re: [squid-users] Adding header with destination IP to icap server via adaptation_meta

2020-12-14 Thread Eliezer Croitor
Have you tried to use this format log in the logfomat? I do not remember by heart but I what I see is the docs is: http://www.squid-cache.org/Versions/v4/cfgman/logformat.html logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs

[squid-users] Squid for Windows: negotiate_kerberos_auth helper seems to leak(?) handles

2020-12-14 Thread Klaus Westkamp
Hi, i'm uncertain, wether this mailing list is the correct one to ask, but i have the disputable honor to make a squid running on a Windows Server (if possible). Whilst squid.exe seems to run fine, i constantly run into an unresponsive system, when i enable Kerberos authentication via

[squid-users] Adding header with destination IP to icap server via adaptation_meta

2020-12-14 Thread roie rachamim
Hi, I was trying to add the value via: adaptation_meta X-PKuku-Dst-IP "%___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Eliezer Croitor
Found the helper at: https://github.com/squid-cache/squid/blob/9837567dd913854a4deddcc49043bfd7631ab63f/src/security/cert_validators/fake/security_fake_certverify.pl.in Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Original Message- From:

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Eliezer Croitor
So starts with: 0 cert_validate... line And ends with?: error_name_0=X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT error_cert_0=cert0 ? I am unsure, let me try to re-read this section. I am missing a fake helper for this.. And a "real world" full example. Can someone simulate it for me? Thanks,

Re: [squid-users] sslcrtvalidator_program

2020-12-14 Thread Amos Jeffries
On 14/12/20 9:11 am, Eliezer Croitor wrote: I am trying to understand the way the sslcrtvalidator_program works. I am pretty sure I have asked this in the past but didn’t found it for some reason. I want to read line by line so. /^-BEGIN CERTIFICATE-$/ *** /^-END CERTIFICATE-$/