Comments (7)
Nice! This is awesome, i'll work on adding it to GS.
Why no peak-and-splice? I simply updated the Squid version without modifying the config file from 2015.
from gatesentry.
Ah okay. Well glad you know about it now. I just noticed it when I looked at the documentation. What PHP framework do you use here anyway?
from gatesentry.
squid is version 3.3.8 on the image. For what it's worth, I was unable to compile version 3.5 with ssl... (I end up with a "undefined reference to `HttpsPortList' ")
This is what I used to configure:
./configure --build=arm-linux-gnueabihf \
--prefix=/usr \
--includedir=${prefix}/include \
--mandir=${prefix}/share/man \
--infodir=${prefix}/share/info \
--sysconfdir=/etc \
--localstatedir=/var \
--libexecdir=${prefix}/lib/squid3 \
--srcdir=. \
--disable-maintainer-mode \
--disable-dependency-tracking \
--disable-silent-rules \
--datadir=/usr/share/squid3 \
--sysconfdir=/etc/squid3 \
--mandir=/usr/share/man \
--enable-inline \
--disable-arch-native \
--enable-async-io=8 \
--enable-storeio=ufs,aufs,diskd,rock \
--enable-removal-policies=lru,heap \
--enable-delay-pools \
--enable-cache-digests \
--enable-icap-client \
--enable-follow-x-forwarded-for \
--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB \
--enable-auth-digest=file,LDAP \
--enable-auth-negotiate=kerberos,wrapper \
--enable-auth-ntlm=fake,smb_lm \
--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,unix_group,wbinfo_group \
--enable-url-rewrite-helpers=fake \
--enable-eui \
--enable-esi \
--enable-icmp \
--enable-zph-qos \
--enable-ecap \
--disable-translation \
--with-swapdir=/var/spool/squid3 \
--with-logdir=/var/log/squid3 \
--with-pidfile=/var/run/squid3.pid \
--with-filedescriptors=65536 \
--with-large-files \
--with-default-user=proxy \
--with-openssl \
--enable-ssl-crtd \
--enable-linux-netfilter \
'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' \
'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' \
'CPPFLAGS=-D_FORTIFY_SOURCE=2' \
'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security'
from gatesentry.
I am using your GateSentry based on the image you put available for download, THX a lot btw :-)
I am facing issues with the ssl_bump functionality, since more and more websites are using https ... even a simple google search returns an error :-(
I will try to upgrade to latest squid 3.5 in order to use peek and splice functionalities ...
@fifthsegment >have you had time to go ahead on this issue ?
from gatesentry.
Thanks for posting up here. What exactly is the issue you're facing with ssl-bump and google searches, have you checked the logs? I did pursue it and was able to install squid 3.5 fine, it remained compatible with GateSentry (after a few minor modifications to the squid config file). Currently i'm working on a faster implementation of GateSentry powered by Golang.
from gatesentry.
This issue is stale because it has been open for 30 days with no activity.
from gatesentry.
This issue was closed because it has been inactive for 14 days since being marked as stale.
from gatesentry.
Related Issues (12)
- YouTube Filtering HOT 4
- Is it possible to use Gate Sentry as a transparent proxy? HOT 2
- GateSentry is blocking all traffic HOT 6
- Block traffic on tablet HOT 8
- customize page HOT 1
- Tie into MITKeberos? HOT 2
- Can't load images/css from provided certificate? HOT 2
- Why are no instructions given about how to self-sign a certificate? HOT 3
- ICAP Protokoll Error HOT 3
- Internet not working over hotspot (using LAN) HOT 4
- custom blocking page HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gatesentry.