<div dir="ltr"><div><div>I just checked it. It'll work at the moment. But only because the dependencies (and the dependency version) doesn't changed from 3.4.8 to 3.5. So there's is no guarantee that it will work with further releases.</div><div><br></div><div>On the other hand: Installing unstable software is not the way the state system works/should work. I talked to the debian guys. That's exactly the reason why they don't release squid 3.5 for jessie but writing patches to solve critical issues on their own.</div><div><br></div><div>Then I have to move every software to unstable state (because of the security) I can install an unstable debian directly.</div><br><div class="gmail_quote"><div dir="ltr">L.P.H. van Belle <<a href="mailto:belle@bazuin.nl">belle@bazuin.nl</a>> schrieb am Mo., 18. Jan. 2016 um 09:07 Uhr:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="NL" link="blue" vlink="blue">
<div>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Really this is an easy thing to do. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Add in you sources.list.d/sid.list ad
the sid repo. ( only src-deb ) <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Run apt-get update. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">apt-get source squid <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">apt-get build-dep squid <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"> make changes if needed, in debian/rules
and debian/changelog IF you changed something.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Build it<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">apt-get source squid –b <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">it errors, thats ok, get the 2 or 3 extra
packages, the same way, after installing them you can build squid again. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">put the debs in a repo you can access and
your done. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Did it here, works fine. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Greetz, <u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy">Louis<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:10.0pt;font-family:Arial;color:navy"><u></u> <u></u></span></font></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div class="MsoNormal" align="center" style="text-align:center"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">
<hr size="2" width="100%" align="center">
</span></font></div>
<p class="MsoNormal"><b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:Tahoma;font-weight:bold">Van:</span></font></b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:Tahoma"> squid-users
[mailto:<a href="mailto:squid-users-bounces@lists.squid-cache.org" target="_blank">squid-users-bounces@lists.squid-cache.org</a>] <b><span style="font-weight:bold">Namens </span></b>startrekfan<br>
<b><span style="font-weight:bold">Verzonden:</span></b> maandag 18 januari 2016
8:07<br>
<b><span style="font-weight:bold">Aan:</span></b>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>; <a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a><br>
<b><span style="font-weight:bold">Onderwerp:</span></b> Re: [squid-users] How
to setup a secure(!) squid proxy</span></font><u></u><u></u></p>
</div>
<p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
<div></div></div></div></div><div lang="NL" link="blue" vlink="blue"><div><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"><div><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">Just talked to the debian guys. They won't upgrade squid to 3.5 in debian jessi. It's also hard for me, to implement unstable components in a productive system. <u></u><u></u></span></font></pre><pre style="white-space:pre-wrap"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">But the debian guys told me, that they will build own patches for 3.4.8 to fix critical problems if you report them properly to<u></u><u></u></span></font></pre><pre style="white-space:pre-wrap"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black"><a href="https://packages.qa.debian.org/s/squid3.html" target="_blank"><font face="Helvetica"><span style="font-family:Helvetica">https://packages.qa.debian.org/s/squid3.html</span></font></a></span></font><font color="black" face="Helvetica"><span style="font-family:Helvetica;color:black"> or </span></font><font color="black"><span style="color:black"><u></u><u></u></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="white-space:pre-wrap"><span style="font-size:10.0pt;color:black"><a href="mailto:security@debian.org" target="_blank">security@debian.org</a> </span></span></font><u></u><u></u></pre><pre><font size="2" color="black" face="Courier New"><span style="white-space:pre-wrap"><span style="font-size:10.0pt;color:black"><br>
<br>
</span></span></font><u></u><u></u></pre><pre><font size="2" color="black" face="Courier New"><span style="white-space:pre-wrap"><span style="font-size:10.0pt;color:black">I hope/think you already do. So I think 3.4.8 should work for me as well.</span></span></font><u></u><u></u></pre><pre style="white-space:pre-wrap"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black"><u></u> <u></u></span></font></pre><pre style="white-space:pre-wrap"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Hello<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> I`m sorry. I'm not a native speaker so I maybe don't find the right words.<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> I'd like to setup a proxy that can scan the incoming traffic for virus <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> (squidclamav). To do that for a https/ssl connection I need the squid <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> ssl-bump feature or is there an other solution?<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Now I want to setup the ssl-bump feature as safe as using no ssl-bump. <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Is this possible with squid 3.4? (Of course every one who has my CA <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> cert can decrypt the traffic, but I keep it safe.)<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Squid is communicating with the remote server(webserver). I'd like to <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> have at least this communication as safe as using a normal browser.<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Does squid 3.4 do all the necessary steps like checking the <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> certificate validity? What about advanced features like cert pinning?<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">I don't think 3.4 is enough. May be 3.5 or higher.<u></u><u></u></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> How do I configure ssl virus scanning? Are this steps enough: <u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> <a href="http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit" target="_blank">http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit</a><u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black"><a href="http://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP" target="_blank">http://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP</a><u></u><u></u></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> Thank you again :)<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"><u></u> <u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> _______________________________________________<u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> squid-users mailing list<u></u><u></u></span></i></span></font></pre></div></div></div></div><div lang="NL" link="blue" vlink="blue"><div><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"><div><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank"><b><font color="red"><span style="color:red;font-weight:bold"> MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "lists.squid-cache.org" </span></font></b> squid-users at lists.squid-cache.org</a><u></u><u></u></span></i></span></font></pre><pre><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt;color:black">><i><span style="font-style:italic"> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><u></u><u></u></span></i></span></font></pre>
<div>
<p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
</div>
</div>
</div>
</div>
</div>
</blockquote></div></div></div>