Re: [squid-users] SSL errors with Squid 3.5.27

2018-06-13 Thread L . P . H . van Belle
Hai, I would say facebook protected there certificates with TSLA. Then you cant use ssl bump if im correct. Greetz, Louis > -Oorspronkelijk bericht- > Van: squid-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens > Julian Perconti > Verzonden: dinsdag 12 juni 2018

Re: [squid-users] Question about traffic calculate

2018-06-13 Thread Tiraen
either such a question, perhaps someone in the course in the SQUID is still not implemented radius accounting? Maybe there are any third-party modules working correctly? 2018-06-08 22:55 GMT+03:00 Tiraen : > > > > > > > *What is "online mode" ?> > Perhaps there are other solutions besides log >

Re: [squid-users] Question about traffic calculate

2018-06-13 Thread Matus UHLAR - fantomas
On 13.06.18 11:51, Tiraen wrote: either such a question, perhaps someone in the course in the SQUID is still not implemented radius accounting? authentication - yes. But squid doese not support accounting (afaik). Maybe there are any third-party modules working correctly? maybe iCAP module

Re: [squid-users] Question about traffic calculate

2018-06-13 Thread Tiraen
ICAP will help provide data on incoming / outgoing traffic? 2018-06-13 12:54 GMT+03:00 Matus UHLAR - fantomas : > On 13.06.18 11:51, Tiraen wrote: > >> either such a question, perhaps someone in the course >> >> in the SQUID is still not implemented radius accounting? >> > > authentication - yes.

[squid-users] Squid and systemd

2018-06-13 Thread James Lay
WellI'll just say up front that systemd is not my friend. When running squid via cli: sudo /opt/squid/sbin/squid it runs like a champ. But using the service file at: https://raw.githubusercontent.com/squid-cache/squid/master/tools/system d/squid.service it times out after a few: 06:20:11 gat

Re: [squid-users] Squid and systemd

2018-06-13 Thread Marcus Kool
I have seen systemd killing daemons when it times out waiting for the pid file to appear. I suggest to doublecheck that the pid filename in the service file and in squid.conf are the same. Marcus On 13/06/18 09:27, James Lay wrote: WellI'll just say up front that systemd is not my friend.

Re: [squid-users] Question about traffic calculate

2018-06-13 Thread Matus UHLAR - fantomas
On 13.06.18 13:26, Tiraen wrote: ICAP will help provide data on incoming / outgoing traffic? icap can get the data and work with it. you don't have to manipulate, just do the accounting. you just need ICAP module that will do it. 2018-06-13 12:54 GMT+03:00 Matus UHLAR - fantomas : On 13.

Re: [squid-users] Question about traffic calculate

2018-06-13 Thread Alex Rousskov
On 06/13/2018 07:09 AM, Matus UHLAR - fantomas wrote: > On 13.06.18 13:26, Tiraen wrote: >> ICAP will help provide data on incoming / outgoing traffic? > icap can get the data and work with it. > you don't have to manipulate, just do the accounting. > you just need ICAP module that will do it. Y

Re: [squid-users] SSL errors with Squid 3.5.27

2018-06-13 Thread Amos Jeffries
On 13/06/18 07:54, Julian Perconti wrote: >> Interesting. >> >> The main issue was that you configured only params for the Diffi-Helman (DH >> and DHE) ciphers - no >curve name. That meant your specified EEC* ciphers >> were disabled since they require a curve name as >well. >> >> Removing this o

[squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-13 Thread baretomas
Hello, I'm setting up a Squid proxy as a cache for a number (as many as possible) of identical JAVA applications to run their web calls through. The calls are ofc identical, and the response they get can safely be cached for 5-10 seconds. I do this because most of the calls is directed at a singl

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-13 Thread Antony Stone
On Wednesday 13 June 2018 at 21:28:27, baretomas wrote: > Hello, > > I'm setting up a Squid proxy as a cache for a number (as many as possible) > of identical JAVA applications to run their web calls through. > The problem is that none of the calls get cached: All rows in the > access.log hava a

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-13 Thread Antony Stone
On Wednesday 13 June 2018 at 21:28:27, baretomas wrote: > The calls from the application is done using ssl / https by telling java to > use Squid as a proxy (-Dhttps.proxyHost and -Dhttp.proxyHost). Okay, but... > http_port 3128 ssl-bump generate-host-certificates=on > dynamic_cert_mem_cache_siz