[squid-users] Squid 5.7 - HOWTO Transparent SSL-Bump

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed Jul 31 10:52:49 UTC 2024


On 31.07.24 15:22, Amos Jeffries wrote:
>Debian/12 (aka "Bookworm") provides the package "squid-openssl" with 
>the SSL-Bump feature enabled. It is a drop-in replacement for the 
>"squid" package.

FYI this version is available since Debian 11, and build options include 
both --with-openssl and --enable-ssl-crtd


>On 31/07/24 03:11, John Mok wrote:
>>Hi Nishant,
>>
>>Yes, I did rebuild the package with
>>
>>--with-openssl
>>--enable-ssl-crtd
>>
>>but squid service failed to start with http_port configured with 
>>intercept and ssl-bump modes at the same time. Any idea ?
>>
>>On Tue, Jul 30, 2024, 21:12 Nishant Sharma wrote:
>>
>>    Hi John,
>>
>>    On 30/07/24 18:05, John Mok wrote:
>>     > Hi all,
>>     >
>>     > I am using squid 5.7 on Debian Bookworm, and would like to setup a
>>     > transparent + SSL bump proxy.
>>     >
>>     > Anyone can point to the right direction ?
>>
>>    Squid on Debian and Ubuntu do not have following options:
>>
>>    --enable-ssl
>>    --enable-ssl-crtd
>>
>>    You may want to build one from source for yourself.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
99 percent of lawyers give the rest a bad name.


More information about the squid-users mailing list