<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>Sorry, this is not solution. All https spliced means for me
      catastrophyc drop byte hit. I knew about this wrkarnd from the
      beginning. But this is unacceptable.<br>
    </p>
    <p>At maximum this is temporary workaround.<br>
    </p>
    <br>
    <div class="moz-cite-prefix">01.05.2017 15:10, marco пишет:<br>
    </div>
    <blockquote
cite="mid:c-6120-j25wmijf-fi5evnsf00v1cphklm2c7511xxdkpr8+18p8r8x@2.bolt.im"
      type="cite">
      <div class="chatflow-status"
        style="overflow:hidden;height:0px;opacity:0.001;float:right"><img
          moz-do-not-send="true"
src="https://bolt.im/t/?O1DO3p0DX-gO2Eho-xIA__BODHNmO3uaZuAp50JqvzDR9xU_6ZZy2Ez7PekRVZpzYADDv_v9nH2bcPXhBMobZTfBONQf1EjyG3wYFOmzpTo"
          style="width:0px;height:0px;opacity:0.001" height="0"
          width="0"></div>
      <div dir="LTR">solution:<br>
        all monitoredsites, m1 m2 are bumped correctly<br>
        all others are spliced<br>
        squid4<br>
        <br>
        this works great. just contact me for questions.<br>
        <br>
        <br>
        acl monitoredSites ssl::server_name_regex -i
        (phncdn|ypncdn|heise|rncdn|youporn) <br>
        <br>
        acl m1 ssl::server_name_regex -i \.youporn\.com <br>
        <br>
        acl m2 ssl::server_name_regex -i \.rncdn7\.com <br>
        <br>
        ssl_bump stare m1 <br>
        ssl_bump stare m2 <br>
        ssl_bump stare monitoredSites <br>
        ssl_bump peek !m1 !m2 !monitoredSites <br>
        #ssl_bump splice step3 !m1 !m2 <br>
        ssl_bump bump m1 <br>
        ssl_bump bump m2 <br>
        ssl_bump bump monitoredSites <br>
        ssl_bump splice !m1 !m2 !monitoredSites</div>
      <chatflow-embed type="signature">
        <div><br>
          <table cellpedding="0" style="margin-bottom:4px" border="0"
            cellspacing="0">
            <tbody>
              <tr>
                <td><a moz-do-not-send="true"
                    href="http://GetHop.com/?_hmid=1493629813"
                    style="text-decoration:none">marco<span
                      style="color:#999"> - Contact Using Hop</span></a></td>
              </tr>
            </tbody>
          </table>
        </div>
      </chatflow-embed>
      <div class="hop_extra"><br>
        On April 30, 2017 at 13:35 GMT, Yuri Voinov <<a
          moz-do-not-send="true" href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a>>
        wrote:<br>
        <blockquote class="hop_quote" style="margin:0 0 0
          .2ex;border-left:1px #ccc solid;padding-left:1ex">
          <div><br>
          </div>
          <meta http-equiv="Content-Type" content="text/html;
            charset=utf-8">
          <p>Check this. It seems this is the issue:<br>
          </p>
          <p><a moz-do-not-send="true" class="moz-txt-link-freetext"
              href="http://bugs.squid-cache.org/show_bug.cgi?id=4711">http://bugs.squid-cache.org/show_bug.cgi?id=4711</a><br>
          </p>
          <br>
          <div class="moz-cite-prefix">30.04.2017 12:02, snable snable
            пишет:<br>
          </div>
          <blockquote type="cite"
cite="mid:CADYcWGR1ntWdqG9vvuDHCO30Pu02MW+TY2rRU=Xu5VpvM2aQ1w@mail.gmail.com">
            <div dir="auto">
              <div style="font-family:sans-serif;font-size:13.696px"
                dir="auto">
                <div style="margin:16px 0px">
                  <div>
                    <div dir="auto">hello
                      <div dir="auto"><br>
                      </div>
                      <div dir="auto">i am using squid on a external
                        box.</div>
                      <div dir="auto">i forward all traffic from my
                        openwrt router to it</div>
                      <div dir="auto">htto works fine</div>
                      <div dir="auto">https with youtube app doesnt work</div>
                      <div dir="auto">i get:</div>
                      <div dir="auto"><br>
                      </div>
                      <div dir="auto">
                        <div dir="auto"> Error negotiating SSL
                          connection on FD 73: error:14094416</div>
                        <div dir="auto">:SSL
                          routines:SSL3_READ_BYTES:sslv3 alert
                          certificate unknown (1/0)</div>
                        <div dir="auto"><br>
                        </div>
                        <div dir="auto">errors</div>
                        <div dir="auto"><br>
                        </div>
                        <div dir="auto">other sites work well so far</div>
                        <div dir="auto"><br>
                        </div>
                        <div dir="auto">i heard that squid4 auto
                          downloads intermediate certificates.. maybe
                          thats the issue?</div>
                        <div dir="auto"><br>
                        </div>
                        <div dir="auto">i workarounded this with a white
                          list of sites that work. but i wanna rollout
                          this for all sites. (also see my other
                          question)</div>
                        <div dir="auto"><br>
                        </div>
                        <div dir="auto">thanks!</div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
              <br>
            </div>
            <br>
            <fieldset class="mimeAttachmentHeader"></fieldset>
            <br>
            <pre wrap="">_______________________________________________
squid-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
          </blockquote>
          <br>
          <div class="moz-signature">-- <br>
            Bugs to the Future</div>
          <div><br>
          </div>
        </blockquote>
      </div>
    </blockquote>
    <br>
  </body>
</html>