[squid-users] after changed from 3.4.13 to 3.5.8 sslbump doesn't work for the site https://banking.postbank.de/

Alex Rousskov rousskov at measurement-factory.com
Thu Sep 17 14:50:00 UTC 2015


On 09/17/2015 05:05 AM, Marcus Kool wrote:
> ssl_bump splice tls_s2_client_hello tls_allowed_hsts
> ssl_bump splice tls_s2_client_hello tls_server_is_bank
> ssl_bump splice tls_s2_client_hello tls_allowed_software
> ssl_bump splice tls_s2_client_hello tls_allowed_pinned

Just FYI: Consider using an any-of ACL to simplify and speed up the above:

  acl toSplice any-of tls_allowed_hsts tls_server_is_bank ...
  ssl_bump splice tls_s2_client_hello toSplice


This is unrelated to the https://banking.postbank.de/ problems you are
investigating.

HTH,

Alex.



More information about the squid-users mailing list