[squid-users] Squid 5: server_cert_fingerprint not working fine...

[UnveilTech - Support]

Hello Squid Team,

Can you have a look to this bugzilla case :
https://bugs.squid-cache.org/show_bug.cgi?id=5245

it's about a bug with Squid 5.7 and TLS 1.3.
Critical case created the 2022-10-27 09:59 UTC, it would be nice to have a fix/patch...

Thanks in advance.

Best regards,
Bye Fred

De : squid-users [mailto:squid-users-bounces at lists.squid-cache.org] De la part de UnveilTech - Support
Envoyé : mardi 25 octobre 2022 18:22
À : squid-users at lists.squid-cache.org
Objet : [squid-users] Squid 5: server_cert_fingerprint not working fine...

Hello,


Here is the part of our squid.conf on Squid 5 :

...

acl my_cf1_list server_cert_fingerprint '/etc/squid5/CF1.txt'

ssl_bump peek all

ssl_bump terminate my_cf1_list

ssl_bump splice all

...



We're not sure about the ssl_bump keys and options to use here, to be honnest we've already spend hours to find the right way to make it working fine.



Here are some samples from the CF1.txt file:

# dayznews.biz

FB:EC:F7:AE:F4:BD:F4:85:68:C0:81:65:99:BA:7D:D3:FA:F8:51:74

# cdeveloper.cn

94:0A:C0:53:A0:E9:74:CE:91:12:6E:FD:06:57:08:58:B2:A5:76:10


1.       Is the server_cert_fingerprint working correctly or are there any bugs with the v5 ?

2.       Are the ssl_bump options/order correct ?

Any tips are welcome, thanks in advance...

Best regards,
Bye Fred
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20221117/e6829d22/attachment-0001.htm>