<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6">
</HEAD>
<BODY>
All,<BR>
<BR>
>From the docs at:<BR>
<BR>
<A HREF="http://wiki.squid-cache.org/Features/SslPeekAndSplice">http://wiki.squid-cache.org/Features/SslPeekAndSplice</A><BR>
<BR>
<TABLE>
<TR>
<TD>
<B>peek</B><BR>
<BR>
<BR>
</TD>
<TD>
step1, step2<BR>
<BR>
<BR>
</TD>
<TD>
Receive SNI and client certificate (step1), or server certificate (step2) while preserving the possibility of splicing the connection. Peeking at the server certificate usually precludes future bumping of the connection (see Limitations). This action is the focus of this project.<BR>
<BR>
<BR>
</TD>
</TR>
<TR>
<TD>
<B>stare</B><BR>
<BR>
<BR>
</TD>
<TD>
step1, step2<BR>
<BR>
<BR>
</TD>
<TD>
Receive SNI and client certificate (step1), or server certificate (step2) while preserving the possibility of bumping the connection. Staring at the server certificate usually precludes future splicing of the connection. Currently, we are not aware of any work being done to support this action.<BR>
<BR>
<BR>
</TD>
</TR>
</TABLE>
<BR>
I see a lot of:<BR>
<BR>
ssl_bump peek all<BR>
<BR>
Does this perform both step1 with SNI and client cert, AND server cert? Thank you.<BR>
<BR>
James
</BODY>
</HTML>