[squid-users] sahibinden.com fails with https bump

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
My Squid gives the following error:

https://i1.someimage.com/xnPCOFO.png

Need more research, but seems better to write site's webmaster.


10.05.16 16:34, turgut kalfaoğlu пишет:
> Hello everyone..
>
> My setup -- this is for speeding up the home ADSL..
>
> https_port 3129 intercept ssl-bump \
>         generate-host-certificates=on dynamic_cert_mem_cache_size=4MB \
>         cert=/etc/squid/ssl_cert/myca.pem key=/etc/squid/ssl_cert/myca.pem
> sslproxy_cert_adapt setCommonName ssl::certDomainMismatch
> sslproxy_cert_error allow all
> sslproxy_flags DONT_VERIFY_PEER
> sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB
> sslcrtd_children 20 startup=3 idle=1
> ssl_bump server-first  all
>
> This works well for facebook, gmail, google, and probably others..
> But https://sahibinden.com , whatever they are doing fails - the page
> appears broken.
> I tried  broken_sites acl trick, did not help.
>
> acl broken_sites ssl::server_name .sahibinden.com
> acl broken_sites ssl::server_name image5.sahibinden.com
> acl broken_sites ssl::server_name .shbdn.com
> ssl_bump none broken_sites
>
> Does anyone have any ideas what else I can try?
> Many thanks, -tk
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXMcHmAAoJENNXIZxhPexGiNUH/jJA0u5XvqFZss9zTNHKK7ba
8fT+wCsOOE7m68KnCGHdwmiBnCCCzdat11afrHUh9rXClJt8Hir9jSfYhOuMfI/H
juveesgCb4fS77h7F+Pz6XGcKGcfn2za9GTOrAWHlgmheb3DHFeP+Oc53aCX4jZy
N+s3Gtc9iOlWCyr8O0u7rupDv/k7tDJzcaR7hWfy35WPUHapjC5JK/Pk1BoHe6Gz
qCwGVDzCAXi2P1oFQ/RIwIno2KmvWh6YtZdE56eEOT8IfaLGg/PQ6WZsIZYuQIFr
q4QSgK7ET1gr6NlhQU6fTCyJ/NjgDrk2L+/yiyIzpF1EK37y7gUYQ8ezYh9gmKo=
=LYjq
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160510/f511c222/attachment.key>