<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Dear Amos & eliezer<div class=""><br class=""></div><div class="">all i need right now is just having it work , since I’m not interested in caching and i can accept the low security affect .</div><div class=""><br class=""></div><div class="">can i keep on squid 3.5 and do the idea of eliezer that is “"<font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;">bypassing squid SSL unwrapping.”” ??</span></font></div><div class=""><font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;"><br class=""></span></font></div><div class=""><font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;"><br class=""></span></font></div><div class=""><font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;">thank you </span></font></div><div class=""><font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;"><br class=""></span></font></div><div class=""><font color="#1f497d" face="Calibri, sans-serif" class=""><span class="" style="font-size: 15px;"><br class=""></span></font></div><div><blockquote type="cite" class=""><div class="">On Jun 21, 2016, at 11:31 AM, Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" class="">squid3@treenet.co.nz</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 21/06/2016 9:43 a.m., --Ahmad-- wrote:<br class=""><blockquote type="cite" class="">Hi ,<br class="">i have squid that is working on 3.5 .<br class="">traffic of t 80 and 443 traffic to Squid via IPTables.<br class=""><br class="">Squid then passes traffic to ClamAV via C-ICAP. Squid is configured to intercept all SSL traffic and PKI has been setup and distributed to all clients.<br class=""><br class="">we have a problem in Skype of Business (Office 365) and Slack (Chat app) seems its broken from squid intercept.<br class=""></blockquote><br class="">* Skype uses a protocol which appears very much ike TLS/SSL. But is not.<br class="">So it usually breaks when treated as TLS.<br class=""><br class="">* Office 365 uses a non-HTTP protocol (RTP, RPC) inside its TLS. So<br class="">Squid cannot SSL-Bump it.<br class=""><br class="">* I imagine that Slack probably does not use HTTPS as well, but some<br class="">other chat protocol.<br class=""><br class="">For all of the above you will probably need the on_unsupported_protocol<br class="">feature in Squid-4.<br class=""><br class="">Amos<br class=""><br class="">_______________________________________________<br class="">squid-users mailing list<br class=""><a href="mailto:squid-users@lists.squid-cache.org" class="">squid-users@lists.squid-cache.org</a><br class="">http://lists.squid-cache.org/listinfo/squid-users<br class=""></div></div></blockquote></div><br class=""></body></html>