RE: [squid-users] ssl-bump not working in non transparent mode

From: Nil Nik <nil_fergi_at_hotmail.com>
Date: Mon, 30 Jun 2014 11:38:51 +0000

Thanks for your reply. I used following line & its working fine: http_port 10.10.16.56:3128 ssl-bump intercept generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/mycert.pem But now its showing certificate error for every https website. How we can resolve this error? ---------------------------------------- > Date: Sat, 28 Jun 2014 21:47:48 +0300 > From: eliezer_at_ngtech.co.il > To: squid-users_at_squid-cache.org > Subject: Re: [squid-users] ssl-bump not working in non transparent mode > > Hey Nil, > > Are you aware that you need to use the "ssl-bump" flags and > dynamic_cert_mem .... etc on the forward regular proxy mode? > such as: > http_port 10.10.16.56:3128 ssl-bump ...(all other settings) > > For it to work? > > Eliezer > > On 06/27/2014 03:45 PM, Nil Nik wrote: >> http_port 10.10.16.56:3127 intercept >> http_port 10.10.16.56:3128 >> https_port 10.10.16.56:3129 generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/mycert.pem intercept ssl-bump >
Received on Mon Jun 30 2014 - 11:38:58 MDT

This archive was generated by hypermail 2.2.0 : Mon Jun 30 2014 - 12:00:05 MDT