<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Amos Jeffries писал 2016-05-16 13:34:<br /> <br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">Please upgrade to 3.5.19.</blockquote>
<br /> Upgrade to 3.5.19<br /> <br /> <br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">acl blocked_https ssl::server_name "/etc/squid/urls/block-url"<br /> https_port 3129 intercept ssl-bump options=ALL:NO_SSLv3:NO_SSLv2<br /> connection-auth=off cert=/etc/squid/squidCA.pem<br /> acl step1 at_step SslBump1<br /> ssl_bump peek step1<br /> ssl_bump terminate blocked_https<br /> <br /> It works.</blockquote>
<br /> Obviously not. There is no instruction what to do other than terminate.<br /> Squid is left to other circumstances to decide what is needed...</blockquote>
<br /> it works! :) if you have the opportunity to check on the virtual machine<br /> <br /> <br /> <br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">But if I use<br /> <br /> acl users_no_inet src "/etc/squid/ip-groups/no-inet"<br /> http_access deny users_no_inet</blockquote>
<br /> ... you force bumping to happen in order to deliver the HTTP error message.<br /> <br /> Try adding this rule above the peek (and the ACL line too):<br /> ssl_bump terminate users_no_inet</blockquote>
<br /> trying, no success :(<br /> <br /> <br /> <br /> I just do not understand the reason for such behavior. Why, if access is allowed everything works, and if the ban on access to HTTP, you must first see a message stating that my certificate has not been able to match, and then later ERR_ACCESS_DENIED. Sorry for my English</div>
</body></html>