[squid-users] problem with some ssl services

Harley Peters harley at thepetersclan.com
Sun Jun 21 13:19:42 UTC 2015


On 06/18/2015 06:01 AM, HackXBack wrote:
> acl exclude_acl ssl::server_name .yahoo.com .gmail.com .googlemail.com
> s.yimg.com .yahooapis.com .akamaihd.net .fbcdn.net .facebook.com .google.com
> ssl_bump peek step1 all
> ssl_bump splice step2 exclude_acl
> ssl_bump stare step2 all
> ssl_bump bump step3 all
> sslproxy_cert_error allow all

I tried your configuration in my squid conf just for the heck of it.
Though it worked correctly with the desktop browser's it failed with 
Android apps like Google play, ebay etc.

This is the equivalent of what I use and seems to work with everything I 
have tried so far.

ssl_bump peek step1
ssl_bump bump step2 !exclude_acl




More information about the squid-users mailing list