[zorp-hu] zorp 3.3.6 + libzorpll 3.3.0.12 + Debian 6.0 ujra

[Barina Tamas]

Pl igy?

class Https(PsslProxy):
    def config(self):
        PsslProxy.config(self)
        self.stack_proxy=(Z_STACK_PROXY, Http)
        self.client_key_file="/etc/zorp/ssl/server/server.key"
        self.client_cert_file="/etc/zorp/ssl/server/server.crt"
        self.copy_to_server = TRUE;
        self.copy_to_client = TRUE;
        self.client_verify_type=PSSL_VERIFY_NONE
        self.server_verify_type=PSSL_VERIFY_REQUIRED_UNTRUSTED

Es elotte a Http-t meg kell csinalni.

Barina Tamás

-----Original Message-----
From: zorp-hu-bounces at lists.balabit.hu
[mailto:zorp-hu-bounces at lists.balabit.hu] On Behalf Of SZALAY Attila
Sent: Wednesday, March 09, 2011 9:33 AM
To: Magyar nyelvu Zorp levelezesi lista.
Subject: Re: [zorp-hu] zorp 3.3.6 + libzorpll 3.3.0.12 + Debian 6.0 ujra

Hi!

On Wed, 2011-03-09 at 09:24 +0100, Nyika Csaba wrote:
> 
> class MyHttpsProxy(HttpProxy):
>        def config(self):
>                HttpProxy.config(self)
>                    
>                
>                self.ssl.client_verify_type = SSL_VERIFY_NONE
>                self.ssl.client_connection_security = SSL_FORCE_SSL
>                self.ssl.server_connection_security = SSL_FORCE_SSL
>                self.ssl.server_ca_directory = '/etc/zorp/ca.d/'
> 	       self.ssl.server_ssl_method = SSL_METHOD_ALL 
> 
>                self.ssl.server_verify_type = SSL_VERIFY_REQUIRED_UNTRUSTED
>                self.ssl.server_disable_proto_sslv2 = TRUE
>                self.ssl.server_ssl_cipher = SSL_CIPHERS_HIGH
>                self.ssl.client_key_file = '/etc/zorp/https/server.key'
>                self.ssl.client_cert_file = '/etc/zorp/https/server.crt'
>                    
>                self.stack_proxy = HttpProxy

Lehet, hogy mas hiba is van, de ezen gyorsan megakadt a szemem.

Ez egy kisse vegyes config-nak tunik. Ez inkabb a 3.9-es zorp-hoz
tartozo config, viszont van benne egy kis 3.3-as beutes is. :)

self.ssl ugyanis csak a 3.9-ben van, viszont ott akkor nem kell
self.stack_proxy.

A logbol viszont az latszik, hogy 3.3-as zorp-ot hasznalsz, ott
szerintem ez a konfig igy nem fog menni.

-- 
SZALAY Attila
Support (L3) Team Leader

e-mail: attila.szalay at balabit.com

BalaBit IT Security
www.balabit.com
H-1115 Bártfai str. 54. Budapest

This Communication is Confidential. We only send and receive email on
the basis of the terms set out at http://www.balabit.com/disclaimer/.

_______________________________________________
zorp-hu mailing list
zorp-hu at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/zorp-hu