[squid-users] squid with sslbump blocking Netflix

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
With peek and splice feature.

http://wiki.squid-cache.org/Features/SslPeekAndSplice

03.03.16 2:45, Bmahak2005 пишет:
> Thanks for the hint. How can I do that ?
>
>
> Sent from my iPhone
>
>> On Mar 2, 2016, at 11:09 AM, Yuri Voinov <yvoinov at gmail.com> wrote:
>>
>>
> Nobody can fight SSL pinning in proprietary apps.
>
> The only way I see is to put Netflex under splice ACL and do not do SSL
> bump for all Netflex CDN.
>
> 02.03.16 22:29, bma пишет:
> >>> I have installed squid 3.15 on ubuntu 15.10 server. squid was
setup with
> >>> sslbump for https traffic. The functionality work without any problem
> i.e. :
> >>> all traffic from both http and https goes through squid and all
> internet can
> >>> be accessed on all devices where certificates are installed. With one
> >>> exception : 'Netflix APP' no longer works on IOS devices (iPhone,
> iPad). no
> >>> matter what I do. All other internet services (safari, and other apps)
> work
> >>> properly on those devices. And I was able to run Netflix from
browser on
> >>> linux boxes and even OS X safari. The only thing that is not
working is
> >>> Netflix APP on IOS.
> >>>
> >>> Of course if I disable sslbump and only allow http to go through squid
> >>> netflix works. I tried both transparent mode and proxy mode on the
iPhone,
> >>> still not working.
> >>>
> >>> Did anyone manage to make Netflix APP on IOS devices work with
squid with
> >>> sslbump enabled ?
> >>>
> >>>
> >>>
> >>> --
> >>> View this message in context:
>
http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-with-sslbump-blocking-Netflix-tp4676381.html
> >>> Sent from the Squid - Users mailing list archive at Nabble.com.
> >>> _______________________________________________
> >>> squid-users mailing list
> >>> squid-users at lists.squid-cache.org
> >>> http://lists.squid-cache.org/listinfo/squid-users
>
>>
>> <0x613DEC46.asc>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJW11GEAAoJENNXIZxhPexGsMIIAIJemE2gpPVJCo8Licrt6Hs6
vIxFb8KHUkq+sXRlRtJbqjwmHPU8m59wcHsVnsJfBFpDdOkd5sMDiBKs9xeTDKAQ
dFgtVW9LORvrienTKca3IhRoBlka/BdePA4vF00OosaGw47fQ20KjmjgPmgRihEs
I5RI1qxnB8RAmmQjMcS+vS6qtXYUkNBJlH6e6vDiuI2FlPDzuLWcGXD78PLJceGd
wWgIVWtQv6zjsBe4eMQzWC61xQ1ms+1ISTaihlyyBIztq1hIFtrOaoghXCJ1Ue6r
pdp+nqIuXbvbgC15fYC1gGJjaznenpPrJJ9gMszAKRuL9gfNGMHjCPZCbv4U/NE=
=TXwl
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160303/3bcf6ded/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160303/3bcf6ded/attachment.key>