<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Yuri, <br>
Now I can see, I'm really doing something wrong, <br>
cause I can't see the FQDN at access.log<br>
What can be the possible problem that I can get just IP:PORT? <br>
<br>
On 15-01-2016 15:23, Yuri Voinov wrote:<br>
<span style="white-space: pre;">></span><br>
<blockquote type="cite"><br>
<br>
15.01.16 23:55, lucas castro пишет:<br>
> Amos, Sorry for emailing right to you.<br>
> ---------- Forwarded message ----------<br>
> From: lucas castro <a class="moz-txt-link-rfc2396E" href="mailto:lucascastroborges@gmail.com"><lucascastroborges@gmail.com></a><br>
> Date: Fri, Jan 15, 2016 at 2:54 PM<br>
> Subject: Re: [squid-users] Squid https bump and google apps<br>
> To: Amos Jeffries <a class="moz-txt-link-rfc2396E" href="mailto:squid3@treenet.co.nz"><squid3@treenet.co.nz></a><br>
<br>
<br>
> Amos, I'm already using squid-3.5.13 with sni,<br>
> the problem is, google use the same certificate for
youtube.com, google.com<br>
> and some others.<br>
> Or Am I doing something wrong?<br>
Yes. SSL Bump is _not_ main ACL tool. So, use SNI as geberal ACL
is bad idea.<br>
<br>
Right way is:<br>
<br>
- Using bump to make FQDN visible and, next<br>
- Using general ACL to access control _or_<br>
- Using redirector to filter out URL's.<br>
<br>
<br>
> On Fri, Jan 15, 2016 at 2:33 PM, Amos Jeffries
<a class="moz-txt-link-rfc2396E" href="mailto:squid3@treenet.co.nz"><squid3@treenet.co.nz></a> wrote:<br>
<br>
>> On 16/01/2016 3:35 a.m., Lucas Castro wrote:<br>
>>> I've hard worked against google applications,<br>
>>> The points is, google use the same certificate for a
bunch of different<br>
>>> apps,<br>
>>> like google.com, youtube.com, drive.google.com.<br>
>>> I'd like to know if someone already got terminated
youtube.com and<br>
>>> keep working google.com and others services.<br>
>><br>
>> It is possible. Using the Squid-3.5 peek-and-splice
feature with SNI<br>
>> detection.<br>
>><br>
>> Amos<br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
>><br>
<br>
<br>
<br>
<br>
<br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
</blockquote>
<span style="white-space: pre;">><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
<br>
</body>
</html>