Re: [squid-users] RE: SSL decryption problem using Mozilla Firefox

Using wireshark??
If it works on squid you can use the debug sections of squid to debug
the connection using it.
If you do have an issue with wireshark or tcpdump traffic
dumping\decryption you should really ask at tcpdump channel\mailing to
verify why would their software do not show the content as you expect it
to be and maybe there is an option that you are not using in the OS
level combined with tcpdump that should allow you what you are talking
about.

All The Bests,
Eliezer

On 07/01/2014 05:33 PM, Makkok wrote:
> Hi Elizer,
>
> Let me clarify the issue;
>
> I successfully set up squid with ssl bumping feature /man in the middle
> proxy/ against my home network.
> Everything works perfect. I see the access.log every https connection url.
> To check if it is really working, besides theaccess.log, I started sniffing
> the traffic on the proxy interface.
> And the issue begins from here.
> If I sniff traffic generated by Internet Explorer, I can decrypt the sniffed
> traffic via Wireshark.
> But in case in Firefox or Opera, I cannot decrypt the packets, even though I
> own the private key of the root CA(of course).
> What should be the problem?
> Thanks!
Received on Tue Jul 01 2014 - 14:45:16 MDT