[squid-users] squid with sslbump blocking Netflix

[Bmahak2005]

Thanks for the hint. How can I do that ?


Sent from my iPhone

> On Mar 2, 2016, at 11:09 AM, Yuri Voinov <yvoinov at gmail.com> wrote:
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Nobody can fight SSL pinning in proprietary apps.
> 
> The only way I see is to put Netflex under splice ACL and do not do SSL
> bump for all Netflex CDN.
> 
> 02.03.16 22:29, bma пишет:
>> I have installed squid 3.15 on ubuntu 15.10 server. squid was setup with
>> sslbump for https traffic. The functionality work without any problem
> i.e. :
>> all traffic from both http and https goes through squid and all
> internet can
>> be accessed on all devices where certificates are installed. With one
>> exception : 'Netflix APP' no longer works on IOS devices (iPhone,
> iPad). no
>> matter what I do. All other internet services (safari, and other apps)
> work
>> properly on those devices. And I was able to run Netflix from browser on
>> linux boxes and even OS X safari. The only thing that is not working is
>> Netflix APP on IOS.
>> 
>> Of course if I disable sslbump and only allow http to go through squid
>> netflix works. I tried both transparent mode and proxy mode on the iPhone,
>> still not working.
>> 
>> Did anyone manage to make Netflix APP on IOS devices work with squid with
>> sslbump enabled ?
>> 
>> 
>> 
>> --
>> View this message in context:
> http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-sslbump-blocking-Netflix-tp4676381.html
>> Sent from the Squid - Users mailing list archive at Nabble.com.
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJW1zpkAAoJENNXIZxhPexGv1AH/2TuqgXJj3PgJfj0oefFxxiB
> JyMLRrhzIE5o7NUBivkJfzWHKddevZZnb6jFDK2FVabNtrvESXUAiBwumBDoJuc8
> KE5g6js1cBJMoOoYNUgusUkw4QtLWofYdVv7CLgnTuCy3uTe6hWMQDVEB+FrKiJ2
> OOs3W6751Zns8+lPyDlpiXU74MhKLGDX5ZLzyuSMRKhwfwz4lFkqxod4EUNM5w6f
> djD7vIWEY9Z3AbLILk8SWcBPMcfmXokXR4Ew99RLoVxfn84iZcK2xISAr3XDj/gB
> 9G1iAm2254hif84mtaP2Jl9F40v9TGkWPBo9gehhlEEXTz7VCtLtrm3rzTIAFG4=
> =XfoF
> -----END PGP SIGNATURE-----
> 
> <0x613DEC46.asc>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users