Re: [squid-users] SSL handshake

Wireshark flags the next protocol extension as malformed coming from (popular origin server). Alex - Can you point to a patch under test or other changes that we can use to alleviate this pain? The extension is included in the Server Hello due to it being included in the Client Hello. I was ho

Re: [squid-users] SSL handshake

@lists.squid-cache.org Subject: Re: [squid-users] SSL handshake On 8/8/21 1:48 AM, senor wrote: > Can you point to a patch under test or other changes that we can use > to alleviate this pain? I will probably regret sharing this unfinished work, but our current changes can be found at [1]. A F

[squid-users] process_name macro usage

discovering them is all I'm looking for. Thanks Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] process_name macro usage

ess it boils down to which directives are safe to apply to workers but not the others? I'm working with squid-4.16 and starting to test on 5. Thanks again for the help Senor From: squid-users on behalf of Alex Rousskov Sent: Tuesday, December 7, 202

[squid-users] restarting dead worker

uot;kid=N" documented? I haven't gone to the source code yet and would like not to. Thanks in advance, Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] TUNNEL logging

like to have but need timely logging more). I tried a logformat that excluded any data not known at initiation time with no luck. I'm hoping I just missed something. Thanks for any help. Senor ___ squid-users mailing list squid-users@lists.squid

Re: [squid-users] TUNNEL logging

his to the customer. Thanks for the weekend response. Senor On 6/23/2018 17:09, Alex Rousskov wrote: > On 06/23/2018 04:38 PM, senor wrote: >> Hi all, >> >> I've noticed that a tunneled 443 request is not logged to access.log >> until the client or server terminat

[squid-users] FTP recursive directory CWD

should be submitted as a feature request? Am I misunderstanding something? Enlightenment is appreciated. Thanks, -Senor [cid:part1.C62E7EC8.EA524190@hotmail.com] ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Error page headers

seems like overkill. Thanks for any help. Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Error page headers

rs On 9/23/19 12:49 AM, senor wrote: > I have custom error pages with content needing the Content-Type > header to reflect what it is (like JSON). I don't see any current > options providing that option for error page handling. I would start with http_reply_access/reply_header_repla

Re: [squid-users] Error page headers

Just for clarity for future searches I think that was intended to be reply_header_access/reply_header_replace combo. It all starts sounding the same after a while. From: squid-users on behalf of senor Sent: Monday, September 23, 2019 10:08 AM To: squid

[squid-users] Adaptation error

. Any guidance or hints are appreciated. Thanks Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Adaptation error

you think eliminating the assert is not a good idea, I think my question is answered. Thanks From: Alex Rousskov Sent: Thursday, June 4, 2020 2:55 PM To: senor; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Adaptation error On 6/4/20 4:15

[squid-users] unexpected debug output

I discovered that 'squid -k rotate' toggles cache.log output into full debug mode as if I had done 'squid -k debug'. Execute a second rotate and it toggles debug off. This only happens when I have an ecap adapter configured. Comment out those lines and everything works as expected. My question

[squid-users] squid SMP notes

It is unclear to me how the more recent 'multiple instance' configuration compares with that of 'SMP Scaling'. Is there a short and sweet description of pros and cons or is the multiple instance simply the new way? The wiki pages vary in detail of implementation but don't directly state any ad

Re: [squid-users] squid SMP notes

squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On > Behalf Of senor > Sent: Thursday, December 1, 2016 8:11 AM > To: squid-users@lists.squid-cache.org > Subject: [squid-users] squid SMP notes > > It is unclear to me how the more recent 'multiple instance' confi

[squid-users] ssl_bump with intermediate CA

hat anyone has to say about my assumptions or understanding. Thanks, Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] ssl_bump with intermediate CA

less there were additional intermediate certs between the mitm cert and the trusted CA known to the client. (As in CA1 is trusted by clients, CA1 signs CA2 which signs CA3 which is used as MITM cert, cafile=CA2) Thanks for comments. Senor > > On Fri, Jan 6, 2017 at 10:40 AM, senor

Re: [squid-users] ssl_bump with intermediate CA

me". I'll submit a request for the description of cafile/tls-cafile to change and move the discussion to there. Thanks all, Senor On 1/6/2017 2:06, Amos Jeffries wrote: > On 2017-01-06 21:27, senor wrote: >> Thank you for the response but I think my question is still unanswered. &g

[squid-users] cert mem cache

be expected by using ssl_crtd? What metrics would be best to view if comparing with and without? Thanks in advance. Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] On using Parent Proxies

Side note... no_cache is not flagged as an error in 3.5.24. If it is misconfigured you will get a notice though. It seems to be treated as a legit alias. Senor On 2/7/2017 20:40, Amos Jeffries wrote: > On 8/02/2017 12:50 a.m., Jude Karuhanga wrote: >> Hello there, >> >> &g

[squid-users] SMP and AUFS

duplicate cache? I'm pretty sure that AUFS is used with squid running in SMP mode a lot. The squid wiki even has a CARP configuration example for this combination. I apologize if I am misunderstanding the statements. Senor ___ squid-users mailing l

Re: [squid-users] SMP and AUFS

On 3/17/2017 7:45, Alex Rousskov wrote: > On 03/16/2017 10:42 PM, senor wrote: > >> I understand that AUFS is not SMP aware but if each worker has its own >> AUFS cache is there any problem other than the inefficiencies of >> duplicate cache? > > Yes. Client

[squid-users] https_port and capath

in advance, Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] ALPN, HTTP/2 and sslbump

Help or corrections to my assumptions are appreciated. Senor ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] ALPN, HTTP/2 and sslbump

Thanks Amos. I guess I was assuming that squid was just copying the ALPN extension info from Client Hello without regard to capabilities (squid 3.5.26). I'll take another stab at the debug info and post more details if that doesn't pop something up. Senor On 11/7/2017 20:29, Amo

[squid-users] log rotate and debug

When I execute 'squid -k rotate' it acts like I also executed 'squid -k debug' and toggles full debugging. Anyone else see this behavior? I've tried numerous combinations of conf options. Not sure at what version this started. I've just begun investigation so looking for others with similar conf