<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Both of you are caught in the access control list, completely lost
sight of that op basically wrote the wrong general rules for bump,
skipped step1 - SslBump1.<br>
<br>
Which can be splice by server name without peek performing? Yes?<br>
<br>
That is why he did not work. All the rest is not fundamental
cosmetics and can be written and debugged later.<br>
<br>
12.09.2016 21:40, Marcus Kool пишет:<br>
<span style="white-space: pre;">><br>
><br>
> On 09/12/2016 12:15 PM, Chico Venancio wrote:<br>
>> I'd think a regex consumes a lot more resources than
server name, but don't know if it is significant.<br>
>> Anyway, without more details we can't be sure the server
name not matching is the problem.<br>
>><br>
>> We need access logs and client(browser) details.<br>
>><br>
>> By the way, acl excludeSSL ssl::server_name
web.whatsapp.com <a class="moz-txt-link-rfc2396E" href="http://web.whatsapp.com"><http://web.whatsapp.com></a><br>
>> Would not work, whatsapp uses some subdomains that also
should not be bumped.<br>
><br>
> squid.conf.documented seems to imply that you can add a dot
to match the subdomains also, just like with dstdomain :<br>
> acl excludeSSL ssl::server_name .web.whatsapp.com<br>
><br>
> Be careful with the regex, it matches also
web.whatsapp.com-24.site: it needs a $<br>
><br>
> Marcus<br>
><br>
>> Chico Venancio<br>
>><br>
>><br>
>> Em 12/09/2016 11:42, "Yuri Voinov" <<a class="moz-txt-link-abbreviated" href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a>
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><mailto:yvoinov@gmail.com></a>> escreveu:<br>
>><br>
>><br>
> Because ssl :: server_name_regex works reliably. As shown by
my personal<br>
> practice. But in general it is by op's choice.<br>
><br>
><br>
> 12.09.2016 20:38, Marcus Kool пишет:<br>
><br>
><br>
> > On 09/12/2016 11:14 AM, Yuri Voinov wrote:<br>
><br>
> >> -----BEGIN PGP SIGNED MESSAGE-----<br>
> >> Hash: SHA256<br>
><br>
> >> Oooops,<br>
><br>
> >> acl must be:<br>
><br>
> >> acl excludeSSL ssl::server_name_regex
web\.whatsapp\.com<br>
><br>
> > why a regex?<br>
> > why not the following ?<br>
> > acl excludeSSL ssl::server_name web.whatsapp.com
<a class="moz-txt-link-rfc2396E" href="http://web.whatsapp.com"><http://web.whatsapp.com></a><br>
><br>
> > Marcus<br>
> > _______________________________________________<br>
> > squid-users mailing list<br>
> > <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
> > <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
<a class="moz-txt-link-rfc2396E" href="http://lists.squid-cache.org/listinfo/squid-users"><http://lists.squid-cache.org/listinfo/squid-users></a><br>
><br>
>><br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
<a class="moz-txt-link-rfc2396E" href="http://lists.squid-cache.org/listinfo/squid-users"><http://lists.squid-cache.org/listinfo/squid-users></a><br>
>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
>><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJX1s2fAAoJENNXIZxhPexGRXoH/2TnA1g+DuwwXsg5qugSngC/
<br>
3mcMtqtSZ8szaESp0ofCuGvB7f3pYU3pOpm6OAumyDDIO9bVmHX7QLDK4hkNWaUo
<br>
f8BICxg/zqDbIxLOJyMRo9kCyT3CT1hUd7F/EtvAAcAUk68blAKupksYZ5gDSeN6
<br>
gY13RLeWoNgsaIZL+LgztRf8bKGepIK9vGFyIPvKXxYP0dey4/zndyjQbRf1ggtV
<br>
E8K/0xU6zaflcggKFPjBHWpekATRoza09/+BT8T/THndf1CBybmAo7wOGi1oG6nu
<br>
1qw3H2X32DyDjIOQ+YV6NVjSDb0jPaj/taanT3W5F1/VNhFshyw/IjIPLeoYw9k=
<br>
=TMa5
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>