[squid-users] SQUID 3.4.8 on RPi 3

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


17.09.2016 12:38, VB пишет:
> Hi Yuri
>
> thx a lot for your links.. following the first one, what I did:
>
> 1. Create and sign the .pem certificate
>
> 2. Update my squid.conf with:
> https_port 3130 ssl-bump \
> cert=/etc/squid/ssl/myCA.pem \
> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
>
> acl step1 at_step SslBump1
>
> ssl_bump peek step1
> ssl_bump bump all
>
> but when I check the configuration (squid3 -k  parse), I get:
>
> Processing: https_port 3130 ssl-bump cert=/etc/squid/ssl/myCA.pem
> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
> ERROR: 'https_port' requires --enable-ssl
> Processing: acl step1 at_step SslBump1
> FATAL: Invalid ACL type 'at_step'
> FATAL: Bungled /etc/squid3/squid.conf line 130: acl step1 at_step SslBump1
>
> how can I overcome these errors on squid 3.4.8?
Drop it out. This is antique version which not yet supported modern SSL
Bump ACL's/directives.

As Wiki, by the way, is written about the implementation of different
versions of the SSL bump in different SQUID. You need to carefully read.
>
> Is my version of squid ssl-enabled? and if not.. how can I
re-configure it?
Yes, but SSL bump has different implementation in antique 3.4.x.
>
>
> thx
> Vincenzo
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/SQUID-3-4-8-on-RPi-3-tp4679556p4679562.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJX3RTvAAoJENNXIZxhPexGJX8IAJ+73xZ4W9R8fxZibyJ8y2lQ
GbxfMmoN9DW49RSqjMXNpLSi+Pqs/dcR0dySS7QwtL3cI/EnMP99ZsNFjxT8RUgi
KsEiz0khi9lqkCeoYAJuQCUSD767T6jVTIGBEyMEQNMXynLzJV8QdfHafFBOETOP
pIEzF8dkEPshohyjTrMcHojRiXA2EjXYwfNDSJb5k31F18adJ2ojcb7T6FikaVr2
w9nOiltEVxjCAere95AuhsMp1iW5ploKYHMP/0u3Pqwm5TPqlLhsUL1V4xAsCD/m
+iItqH+wQO3eLabmGcsPRctDAMOZsGdmXdZU1zpnQI6qgPagCtj7vi7JOZvZm9Y=
=whNB
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160917/335153c5/attachment.key>