[squid-users] squid4 with sslbump not logged server side cert_subject and cert_issuer

Peter Viskup skupko.sk at gmail.com
Thu Feb 15 12:44:12 UTC 2018


Running squid version 4.0.23 with logformat including

SSLBumpMode=%ssl::bump_mode SSLSNI="%ssl::>sni"
SSLClientProto="%ssl::>negotiated_version"
SSLServerProto="%ssl::<negotiated_version"
SSLBumpClientCipher="%ssl::>negotiated_cipher"
SSLBumpServerCipher="%ssl::<negotiated_cipher"
SSLBumpSubject="%ssl::<cert_subject"
SSLBumpIssuer="%ssl::<cert_issuer"

and ssl_bump configured simply with

ssl_bump bump all
http_access allow all

the messages still logged with dashes for Subject and Issuer values

SSLBumpMode=bump SSLSNI="www.google.sk" SSLClientProto="TLS/1.0" SSLServerProto
="TLS/1.2" SSLBumpClientCipher="ECDHE-RSA-AES256-SHA"
SSLBumpServerCipher="ECDHE-RSA-AES128-GCM-SHA256" SSLBumpSubject="-"
SSLBumpIssuer="-"

I am doing something wrong or did I overlooked something?

Peter


More information about the squid-users mailing list