Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Security Issue on Squid

    Scheduled Pinned Locked Moved Cache/Proxy
    4 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NetViciousN Offline
      NetVicious
      last edited by

      In summary it's a way to bypass the security of httpS certificates within a bug on Squid.

      Squid Proxy Cache Security Update Advisory SQUID-2015:1

      Incorrect X509 server certificate validation
      http://www.squid-cache.org/Advisories/SQUID-2015_1.txt

      ..//\/ e t . \/ i c i o u s ..

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        ROFL. Yah, lets MITM everyone and then scream danger, no certificate validation.

        1 Reply Last reply Reply Quote 0
        • C Offline
          chris4916
          last edited by

          ;D ;D

          Like transparent proxy, MITM is very attractive isn't it?  ;D ;D

          Jah Olela Wembo: Les mots se muent en maux quand ils indisposent, agressent ou blessent.

          1 Reply Last reply Reply Quote 0
          • BBcan177B Offline
            BBcan177 Moderator
            last edited by

            https://forum.pfsense.org/index.php?topic=93188.0

            "Experience is something you don't get until just after you need it."

            Website: http://pfBlockerNG.com
            Twitter: @BBcan177  #pfBlockerNG
            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.