[squid-users] squid 3.3.8 https

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
3.3.8 is antique at 2016.

Upgrade at least to 3.5.20.


09.08.2016 2:39, Erdosain9 пишет:
>
> I want to limit the bandwidth for youtube, so I want to intercept
https connections. I followed several tutorials and can not. Could
someone give me a hand ?? Thanks to all.
>
> this is my squid.conf
>
> |# Squid listen Port
> http_port 192.168.1.215:3128 <http://192.168.1.215:3128> ssl-bump
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
key=/etc/squid/example.com.private cert=/etc/squid/example.com.cert
> # SSL Bump Config
> always_direct allow all
> ssl_bump server-first all
> sslproxy_cert_error deny all
> sslproxy_flags DONT_VERIFY_PEER
> sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB
sslcrtd_children 8 startup=1 idle=1|
> I import the example.com.cert to the webbrowser and then any web https
i go i get "The proxy server is refusing connections". if not https go well.
>
> this is access.log:
> |
> |192.168.1.172 TCP_HIT/200 52543 GET
http://www.silencio.com.ar/wp-content/uploads/2016/07/AHJ8239-540x386.jpg
- HIER_NONE/- image/jpeg
> 192.168.1.172 TCP_HIT/200 49912 GET
http://www.silencio.com.ar/wp-content/uploads/2016/07/strokes-2001-adentro-540x386.jpg
- HIER_NONE/- image/jpeg
> 192.168.1.172 TCP_HIT/200 43804 GET
http://www.silencio.com.ar/wp-content/uploads/2016/07/ArcticMonkeys012-540x386.jpg
- HIER_NONE/- image/jpeg
> 192.168.1.172 TCP_DENIED/200 0 CONNECT www.google-analytics.com:443
<http://www.google-analytics.com:443> - HIER_NONE/- -
> 192.168.1.172 TCP_MISS/301 807 GET http://www.youtube.com/ -
HIER_DIRECT/64.233.186.91 <http://64.233.186.91> text/html
> 192.168.1.172 NONE/200 0 CONNECT www.youtube.com:443
<http://www.youtube.com:443> - HIER_DIRECT/64.233.186.91
<http://64.233.186.91> -
> 192.168.1.172 NONE/200 0 CONNECT blocklist.addons.mozilla.org:443
<http://blocklist.addons.mozilla.org:443> - HIER_DIRECT/52.35.149.230
<http://52.35.149.230> -||
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXqO5+AAoJENNXIZxhPexGUT4H/iFwAOK4xf2QIQf/b21H0vfZ
j9+ldNZpMaWlsn12tw96ip6o8iQ9h+j5GuTlpbo8BTQolEsHWMG8YvI0HCdPsXZB
nRLteQ/3ZDysNgbrnNuBXv6cmWdwd1S8rNamHVdxzDGpw/Guc2D1X7+rk+rwLndw
rMw9N2iO1eW4/q8BZbFyMaRkHRO4LR/Dyz2cvSRTCn3BTeEyt/yJFK5s4IuU7YjY
igUYC4fysRweUoVJxCGOOP/q90pT5CYJkdp+wgL3dG6Bx9AuUPVFaj8kv6atyMNZ
EE5Ttbnp3+mnE2MF61WIu/fsls+7n7UEUnjm4jphWR1ch1Q78V1e3hzYTuzjmjg=
=ZphP
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160809/bac145a1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160809/bac145a1/attachment.key>