<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div>May it be <a href="https://docs.diladele.com/faq/squid/chrome_ssl_filter/dns_does_not_exist.html">https://docs.diladele.com/faq/squid/chrome_ssl_filter/dns_does_not_exist.html</a> ?<br>
<br>
Best regards,
<div>Rafael Akchurin</div>
</div>
<div><br>
Op 5 dec. 2017 om 20:34 heeft erdosain9 <<a href="mailto:erdosain9@gmail.com">erdosain9@gmail.com</a>> het volgende geschreven:<br>
<br>
</div>
<blockquote type="cite">
<div><span>Hi, and thanks.</span><br>
<span></span><br>
<span>But, i dont get it, how this is possible, if the bumping is working well. I</span><br>
<span>mean, if all https is working with my certificate, except for those that i</span><br>
<span>block (from chrome). But the bumping is working well in Chrome and Firefox.</span><br>
<span></span><br>
<span>This is log from Chrome with port </span><br>
<span></span><br>
<span>1512501177.181     33 192.168.1.121 TCP_MISS/204 459 POST</span><br>
<span><a href="https://www.google.com.ar/gen_204?">https://www.google.com.ar/gen_204?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html</span><br>
<span>443</span><br>
<span>1512501177.182     35 192.168.1.121 TCP_MISS/204 459 POST</span><br>
<span><a href="https://www.google.com.ar/gen_204?">https://www.google.com.ar/gen_204?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html</span><br>
<span>443</span><br>
<span>1512501177.186     40 192.168.1.121 TCP_MISS/200 815 POST</span><br>
<span><a href="https://www.google.com.ar/url?">https://www.google.com.ar/url?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html 443</span><br>
<span>1512501177.252     59 192.168.1.121 TCP_DENIED/200 0 CONNECT</span><br>
<span><a href="http://web.whatsapp.com:443">web.whatsapp.com:443</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_NONE/- - 443</span><br>
<span>1512501177.338     80 192.168.1.121 TCP_MISS/204 193 GET</span><br>
<span><a href="http://www.gstatic.com/generate_204">http://www.gstatic.com/generate_204</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a></span><br>
<span>HIER_DIRECT/<a href="http://www.gstatic.com">www.gstatic.com</a> - 80</span><br>
<span></span><br>
<span></span><br>
<span>This is the log from firefox with port </span><br>
<span></span><br>
<span>1512501278.321     41 192.168.1.121 TCP_MISS/200 813 GET</span><br>
<span><a href="https://www.google.com.ar/url?">https://www.google.com.ar/url?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html 443</span><br>
<span>1512501278.684    185 192.168.1.121 TCP_DENIED/200 0 CONNECT</span><br>
<span><a href="http://www.whatsapp.com:443">www.whatsapp.com:443</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_NONE/- - 443</span><br>
<span>1512501278.875      3 192.168.1.121 TAG_NONE/403 6567 GET</span><br>
<span><a href="https://www.whatsapp.com/?">https://www.whatsapp.com/?</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_NONE/- text/html 443</span><br>
<span>1512501278.916     35 192.168.1.121 TCP_MISS/204 459 POST</span><br>
<span><a href="https://www.google.com.ar/gen_204?">https://www.google.com.ar/gen_204?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html</span><br>
<span>443</span><br>
<span>1512501279.160    877 192.168.1.121 TAG_NONE/200 0 CONNECT</span><br>
<span><a href="http://www.google.com.ar:443">www.google.com.ar:443</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_DIRECT/<a href="http://www.google.com.ar">www.google.com.ar</a> - 443</span><br>
<span>1512501279.278     52 192.168.1.121 TCP_MISS/204 459 POST</span><br>
<span><a href="https://www.google.com.ar/gen_204?">https://www.google.com.ar/gen_204?</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_DIRECT/- text/html</span><br>
<span>443</span><br>
<span>1512501279.529    608 192.168.1.121 TCP_DENIED/200 0 CONNECT</span><br>
<span><a href="http://www.whatsapp.com:443">www.whatsapp.com:443</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_NONE/- - 443</span><br>
<span>1512501279.746      2 192.168.1.121 TAG_NONE/403 6569 GET</span><br>
<span><a href="http://squid.mydomain.lan:3128/squid-internal-static/icons/SN.png">http://squid.mydomain.lan:3128/squid-internal-static/icons/SN.png</a></span><br>
<span><a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_NONE/- text/html 3128</span><br>
<span>1512501279.832     75 192.168.1.121 TCP_DENIED/200 0 CONNECT</span><br>
<span><a href="http://www.whatsapp.com:443">www.whatsapp.com:443</a> <a href="mailto:user@mydomain.LAN">
user@mydomain.LAN</a> HIER_NONE/- - 443</span><br>
<span>1512501279.838      0 192.168.1.121 TAG_NONE/403 6571 GET</span><br>
<span><a href="https://www.whatsapp.com/favicon.ico">https://www.whatsapp.com/favicon.ico</a>
<a href="mailto:user@mydomain.LAN">user@mydomain.LAN</a> HIER_NONE/- text/html</span><br>
<span>443</span><br>
<span></span><br>
<span>"How do you compare the two certificates? "</span><br>
<span></span><br>
<span>I see the certificate, and look detail (both, firefox and chrome).</span><br>
<span><<a href="http://squid-web-proxy-cache.1019090.n4.nabble.com/file/t376870/Captura_de_pantalla_de_2017-12-05_16-25-48.png">http://squid-web-proxy-cache.1019090.n4.nabble.com/file/t376870/Captura_de_pantalla_de_2017-12-05_16-25-48.png</a>>
</span><br>
<span></span><br>
<span>is the same CN :squid.mydomain.lan</span><br>
<span></span><br>
<span>And, again, this error just happend from Chrome when there is time to show a</span><br>
<span>"web from squid" (no route to host, error, access denied,  etc.)</span><br>
<span></span><br>
<span>For example if i see the certificate from facebook (trough squid https</span><br>
<span>bumping) i see my certificate... so why when i block the web Chrome give</span><br>
<span>that problem....</span><br>
<span></span><br>
<span>Thanks again</span><br>
<span>(sorry i dont speak english very well)</span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span>--</span><br>
<span>Sent from: <a href="http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html">
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html</a></span><br>
<span>_______________________________________________</span><br>
<span>squid-users mailing list</span><br>
<span><a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a></span><br>
<span><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
</div>
</blockquote>
</body>
</html>