Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-06-03 Thread Antoine Klein
a...@nanogherkin.com: On 02/06/14 15:12, Antoine Klein wrote: Ok I'm understanding ! Finally I'm going to change strategy, if it isn't possible to decrypt HTTPS without warning for client, I shall make differently. You will have to, as it's impossible to do so without interfering with the user's client

Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-30 Thread Antoine Klein
the Squid docs about SSL and a lot of general info about how SSL works (ie the trust model) as I feel we are all now at a loss in helping you further! Alex On 29/05/14 20:02, Antoine Klein wrote: Thanks for your answers ! Alex your last answer is for me ? What is illegal ? Finally, i

Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-30 Thread Antoine Klein
:00 Alex Crow a...@nanogherkin.com: Hi Antoine, Replies below: On 30/05/14 15:44, Antoine Klein wrote: Ok i'm really sorry, i don't understand the english very well... I read again the discussion but i am confused :/ Before this project i had not any knowledge about certificates and SSL

Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-29 Thread Antoine Klein
get any further help from this list with either of those. On 28 May 2014 15:55:04 BST, Antoine Klein klein.a...@gmail.com wrote: I send back my post because i'm not sur it is sent... Ok thanks all ! I haven't in control of clients so it's the real problem, i can't install certificate

Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-28 Thread Antoine Klein
: On 28/05/2014 8:19 a.m., Antoine Klein wrote: I want to bump ssl connections, but without produce a warning of course. I read it is possible to generate a request of certification with a key and send this file to an authority to sign it, do you know that ? Having your cert signed by a widely

[squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-27 Thread Antoine Klein
: Failed to acquire SSL private key '/etc/ssl/myGodaddyCertif.crt': error:0906D06C:PEM routines:PEM_read_bio:no start line I haven't a private key, so is this normal ? Thanks ! -- Antoine KLEIN

[squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-27 Thread Antoine Klein
: Failed to acquire SSL private key '/etc/ssl/myGodaddyCertif.crt': error:0906D06C:PEM routines:PEM_read_bio:no start line I haven't a private key, so is this normal ? Thanks ! -- Antoine KLEIN

Re: [squid-users] Install Godaddy certificate on squid to use ssl-bumping functionnality

2014-05-27 Thread Antoine Klein
:13 PM, Antoine Klein wrote: My boss give me a certificate purchased from Godaddy to intercept HTTPS request. Do you need it for a reverse proxy by any chance or bumping legit ssl connections? I am not sure you know that but I asked anyway. Eliezer -- Antoine KLEIN

Re: [squid-users] Intercept HTTPS without using certificates - Just apply a QoS on the connexion

2014-05-16 Thread Antoine Klein
powerful but even after 14 years of managing Linux gateways I still prefer you just use shorewall to take away the complexity - and you are welcome to call me lazy ;-) Alex On 15/05/14 20:04, Antoine Klein wrote: Ok thanks, it could be a good idea ! Do you know if we can apply a QoS

[squid-users] Intercept HTTPS without using certificates - Just apply a QoS on the connexion

2014-05-15 Thread Antoine Klein
the SSL packet ? Thanks ! -- Antoine KLEIN

Re: [squid-users] Intercept HTTPS without using certificates - Just apply a QoS on the connexion

2014-05-15 Thread Antoine Klein
Ok thanks, it could be a good idea ! Do you know if we can apply a QoS with the bucket concept of delay pool using the Linux QoS Tools ? 2014-05-15 14:41 GMT-04:00 Leonardo Rodrigues leolis...@solutti.com.br: Em 15/05/14 14:59, Antoine Klein escreveu: Hi there, I need to install squid