[squid-users] SQUID 3.4.8 on RPi 3

Yuri Voinov yvoinov at gmail.com
Sat Sep 17 09:59:04 UTC 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


17.09.2016 12:38, VB пишет:
> Hi Yuri
>
> thx a lot for your links.. following the first one, what I did:
>
> 1. Create and sign the .pem certificate
>
> 2. Update my squid.conf with:
> https_port 3130 ssl-bump \
> cert=/etc/squid/ssl/myCA.pem \
> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
>
> acl step1 at_step SslBump1
>
> ssl_bump peek step1
> ssl_bump bump all
>
> but when I check the configuration (squid3 -k  parse), I get:
>
> Processing: https_port 3130 ssl-bump cert=/etc/squid/ssl/myCA.pem
> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
> ERROR: 'https_port' requires --enable-ssl
> Processing: acl step1 at_step SslBump1
> FATAL: Invalid ACL type 'at_step'
> FATAL: Bungled /etc/squid3/squid.conf line 130: acl step1 at_step SslBump1
>
> how can I overcome these errors on squid 3.4.8?
Drop it out. This is antique version which not yet supported modern SSL
Bump ACL's/directives.
>
> Is my version of squid ssl-enabled? and if not.. how can I
re-configure it?
Yes, but SSL bump has different implementation in antique 3.4.x.
>
>
> thx
> Vincenzo
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/SQUID-3-4-8-on-RPi-3-tp4679556p4679562.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJX3RPoAAoJENNXIZxhPexGPXAIAI0dBkbBSZCYksa74JxVqNVY
mXySn5w8BSQ9lXE1SDvNrekjTEN69Zgt3hJ6B5hlaXLVOPqa9QoRtrQY0LrfCuA+
Amh9Oqp+KfRJi10EAXXq1r6iIfuSFQ+4Wup/bg0PzPbPlvPl3qTqXuVxcH9kBuHe
0RKGuVDty5EE4BaLmzW8PCBF9hcY5RNWe3XhiphlPJAbtDSJk0a6VZe4tirxRGwB
RLqponHgZ8enFCpjJocMBgCPfvYTFQvDYZ0mShN3HULYn6pB+Yc3FFulRX+NSvd/
u9YGXk0mY27Qv2IlguFGARufRnEqaCXav08+11XW/PJIdUkgcIGK5BHDLe+zFv0=
=hHYX
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160917/f06de81e/attachment-0001.key>


More information about the squid-users mailing list