<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Yep, man.<br>
<br>
Sad, but true.<br>
<br>
11.07.15 16:13, David Touzeau пишет:<br>
<span style="white-space: pre;">> To understand what you says:<br>
><br>
> Means that squid try to understand the TLS protocol in order
to retrieve certificate information but some TAGS in certificate
are not properly understood.<br>
> So Squid still accept/forward the connection without decoding
TLS ?<br>
><br>
> Le 11/07/2015 11:33, Amos Jeffries a écrit :<br>
>> On 11/07/2015 9:23 p.m., David Touzeau wrote:<br>
>>> Hi all<br>
>>><br>
>>><br>
>>> We using Squid 3.5.6 in transparent mode with SSL<br>
>>><br>
>>><br>
>>> With the following settings:<br>
>>><br>
>>> acl ssl_step1 at_step SslBump1<br>
>>> acl ssl_step2 at_step SslBump2<br>
>>> acl ssl_step3 at_step SslBump3<br>
>>> ssl_bump peek ssl_step1<br>
>>> ssl_bump splice all<br>
>>><br>
>>><br>
>>> We have many entries "TAG_NONE/XXXX" in access.log
when accessing to SSL<br>
>>> websites.<br>
>>><br>
>>> What does it means ?<br>
>> Spliced connection. No HTTP handling occured.<br>
>><br>
>> The TLS logics do not yet have proper processing tags
defined yet. That<br>
>> is still on the todo list.<br>
>><br>
>> Amos<br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJVoXm5AAoJENNXIZxhPexG6TUH/2H02D3FXynZ1Y2lngkEhDD3
<br>
ov8I4uujWwAEW9cmaoNqWCcewO/8gOzxa46dTntxnFi8Zun6/C88bWSVedBmcGN5
<br>
4hjjdQjnIO7D1aT+ehp0ozW2TrXJcy2IYx/9S5tZuWLByz77YTjyau+e+4Eym3/H
<br>
rjEzX8yQjBJiWhl4ihMn9Xl3LLBBRsidDmaTNPpNAWhUBJcR5SYQ54LitNdWJjTe
<br>
I3eIyzU7UlInjhCD4VFhyuuT2lwXSsD8HrLPSaLalenZNeeFMofw6h3NHibyYENa
<br>
zyNgPMp8pHXcok2+ipY5I0wGYoXTpbncRry45G4ae9wQJhuPZsULI2pB2ToHWUQ=
<br>
=EQ9v
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>