[squid-users] squid with sslbump blocking Netflix

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Nobody can fight SSL pinning in proprietary apps.

The only way I see is to put Netflex under splice ACL and do not do SSL
bump for all Netflex CDN.

02.03.16 22:29, bma пишет:
> I have installed squid 3.15 on ubuntu 15.10 server. squid was setup with
> sslbump for https traffic. The functionality work without any problem
i.e. :
> all traffic from both http and https goes through squid and all
internet can
> be accessed on all devices where certificates are installed. With one
> exception : 'Netflix APP' no longer works on IOS devices (iPhone,
iPad). no
> matter what I do. All other internet services (safari, and other apps)
work
> properly on those devices. And I was able to run Netflix from browser on
> linux boxes and even OS X safari. The only thing that is not working is
> Netflix APP on IOS.
>
> Of course if I disable sslbump and only allow http to go through squid
> netflix works. I tried both transparent mode and proxy mode on the iPhone,
> still not working.
>
> Did anyone manage to make Netflix APP on IOS devices work with squid with
> sslbump enabled ?
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-sslbump-blocking-Netflix-tp4676381.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJW1zpkAAoJENNXIZxhPexGv1AH/2TuqgXJj3PgJfj0oefFxxiB
JyMLRrhzIE5o7NUBivkJfzWHKddevZZnb6jFDK2FVabNtrvESXUAiBwumBDoJuc8
KE5g6js1cBJMoOoYNUgusUkw4QtLWofYdVv7CLgnTuCy3uTe6hWMQDVEB+FrKiJ2
OOs3W6751Zns8+lPyDlpiXU74MhKLGDX5ZLzyuSMRKhwfwz4lFkqxod4EUNM5w6f
djD7vIWEY9Z3AbLILk8SWcBPMcfmXokXR4Ew99RLoVxfn84iZcK2xISAr3XDj/gB
9G1iAm2254hif84mtaP2Jl9F40v9TGkWPBo9gehhlEEXTz7VCtLtrm3rzTIAFG4=
=XfoF
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160303/705f52ac/attachment.key>