[squid-users] Squid doesn't use domain name as a request URL in access.log when splice at step 3 occurs
Garri Djavadyan
garryd at comnet.uz
Sat Nov 5 16:19:28 UTC 2016
On 2016-11-05 09:22, Amos Jeffries wrote:
> On 5/11/2016 6:56 a.m., Garri Djavadyan wrote:
>> On 2016-11-04 19:42, Amos Jeffries wrote:
>>> On 5/11/2016 1:43 a.m., Garri Djavadyan wrote:
>>>> The configuration for splice at step 3:
>>>>
>>>> # diff etc/squid.conf.default etc/squid.conf
>>>> 73a74,78
>>>>> https_port 3129 intercept ssl-bump cert=etc/ssl_cert/myCA.pem
>>>> generate-host-certificates
>>>>> acl StepSplice at_step SslBump3
>>>>> ssl_bump splice StepSplice
>>>>> ssl_bump peek all
>>>>> logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru
>>>>> %[un
>>>> %Sh/%<a %mt %ssl::>sni
>>>>
>>>>
>>>> The result:
>>>> 1478256303.420 574 172.16.0.21 TCP_TUNNEL/200 6897 CONNECT
>>>> 104.124.119.14:443 - ORIGINAL_DST/104.124.119.14 - www.openssl.org
>>>>
>>>>
>>>> Is it a bug or intended behavior? Thanks.
>>>>
>>>
>>> The person (Christos) who designed that behaviour is not reading this
>>> mailing list very often.
>>
>> Does it mean a bug report would have better chances to get noticed?
>
> Sorry, squid-dev is the best place for that.
>
> Amos
Thank you for the information!
Garri
More information about the squid-users
mailing list