Hi Amos,

Does this mean if I use sslbump, I can't have parent proxy.

Regards,
Ming

-----Original Message-----
From: Amos Jeffries [mailto:[email protected]] 
Sent: January-26-11 5:53 PM
To: [email protected]
Subject: Re: [squid-users] sslbump and always_direct

On Wed, 26 Jan 2011 20:18:08 +0000, Ming Fu wrote:
> Hi,
> 
> 
> The wiki sample http://wiki.squid-cache.org/Features/SslBump suggested
> addi= ng "always_direct allow all".
> 
> This will prevent me from having a peer proxy when sslbump is
configured.
> 
> Wonder what is the reason behind the setting.

With ssl-bump Squid will hit bugs when un-wrapping back to a CONNECT
request or may send raw unencrypted https://... URLs to the peers.

Amos

Reply via email to