diff --git a/README.md b/README.md index d33cf19..e69de29 100644 --- a/README.md +++ b/README.md @@ -1,2 +0,0 @@ -# squid - diff --git a/install.sh b/install.sh new file mode 100644 index 0000000..71a2cfa --- /dev/null +++ b/install.sh @@ -0,0 +1,34 @@ +if [[ "$(whoami)" != "root" ]] +then + echo "use sudo" + exit +fi +while true; do + read -p "Do you want to install with icap? (Yy/Nn) " yn + case $yn in + [Yy]* ) read -p "Enter server ip: " serv + echo "icap_enable on icap_service service_req reqmod_precache bypass=1 icap://$serv/request adaptation_access service_req allow all icap_send_client_ip on icap_send_client_username on"\ + >>squid.conf + break;; + [Nn]* ) break;; + * ) echo "Please answer Y/y or N/n.";; + esac +done +apt-get update -y > /dev/null +dpkg -i *.deb > /dev/null +apt install -f -y +dpkg -i *.deb > /dev/null +rm /etc/squid/squid.conf +cp squid.conf /etc/squid/squid.conf +openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -keyout /etc/squid/squid.pem -out /etc/squid/squid.pem +chown proxy:proxy /etc/squid/squid.pem +chmod 640 /etc/squid/squid.pem +openssl x509 -outform der -in /etc/squid/squid.pem -out /etc/squid/squid.crt +/usr/lib/squid/security_file_certgen -c -s /var/lib/ssl_db -M 4MB +chown proxy:proxy -R /var/lib/ssl_db +squid -k reconfigure +systemctl restart squid + + + + diff --git a/squid-cgi_4.10-1ubuntu1.7_amd64.deb b/squid-cgi_4.10-1ubuntu1.7_amd64.deb new file mode 100644 index 0000000..88bc4cc Binary files /dev/null and b/squid-cgi_4.10-1ubuntu1.7_amd64.deb differ diff --git a/squid-common_4.10-1ubuntu1.7_all.deb b/squid-common_4.10-1ubuntu1.7_all.deb new file mode 100644 index 0000000..7c8758f Binary files /dev/null and b/squid-common_4.10-1ubuntu1.7_all.deb differ diff --git a/squid-purge_4.10-1ubuntu1.7_amd64.deb b/squid-purge_4.10-1ubuntu1.7_amd64.deb new file mode 100644 index 0000000..6b616fa Binary files /dev/null and b/squid-purge_4.10-1ubuntu1.7_amd64.deb differ diff --git a/squid.conf b/squid.conf new file mode 100644 index 0000000..6e7512f --- /dev/null +++ b/squid.conf @@ -0,0 +1,6 @@ +http_access allow all +http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/squid.pem +acl step1 at_step SslBump1 +ssl_bump peek step1 +ssl_bump bump all +sslcrtd_program /usr/lib/squid/security_file_certgen -s /var/lib/ssl_db -M 4MB diff --git a/squid_4.10-1ubuntu1.7_amd64.deb b/squid_4.10-1ubuntu1.7_amd64.deb new file mode 100644 index 0000000..eb64289 Binary files /dev/null and b/squid_4.10-1ubuntu1.7_amd64.deb differ diff --git a/squidclient_4.10-1ubuntu1.7_amd64.deb b/squidclient_4.10-1ubuntu1.7_amd64.deb new file mode 100644 index 0000000..eca0fe3 Binary files /dev/null and b/squidclient_4.10-1ubuntu1.7_amd64.deb differ