RE: [squid-users] sslbump and always_direct

Hi Amos,

Does this mean if I use sslbump, I can't have parent proxy.

Regards,
Ming

-----Original Message-----
From: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Sent: January-26-11 5:53 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] sslbump and always_direct

On Wed, 26 Jan 2011 20:18:08 +0000, Ming Fu wrote:
> Hi,
>
>
> The wiki sample http://wiki.squid-cache.org/Features/SslBump suggested
> addi= ng "always_direct allow all".
>
> This will prevent me from having a peer proxy when sslbump is
configured.
>
> Wonder what is the reason behind the setting.

With ssl-bump Squid will hit bugs when un-wrapping back to a CONNECT
request or may send raw unencrypted https://... URLs to the peers.

Amos

Received on Thu Jan 27 2011 - 12:53:36 MST