It also utilizes ssl bump and certain websites that use SSL (usually big ones, like Facebook and Youtube) don't allow the use of the certificate. While the page itself loads, it usually doesn't load images or stylesheets that reside on static CDN servers.
For instance when loading facebook I get the following errors in the browser:
Failed to load resource: The certificate for this server is invalid. You might be connecting to a server that is pretending to be "static.xx.fbcdn.net" which could put your confidential information at risk.
And in the squid logs I get the following:
XXXXXXXX.XXX 166 127.0.0.1 NONE/200 0 CONNECT scontent-yyz1-1.xx.fbcdn.net:443 - HIER_DIRECT/126.96.36.199 -
And while I know it is really just complaining that this is a man in the middle attack, which is basically what ssl bump is...I really just want to filter traffic, and make it so that I can turn certain sites on and certain sites off at certain times; but if you want to filter an tls/ssl site, this is what is required. That being said, at other times I'd like to allow people to use Facebook on my network, just not during working hours.
I also know that the certificate that I downloaded from the server and installed on the test laptop, probably isn't the best thing to use, and I even think that it's probably the source of the issue since it isn't certified by a CA.
If the certificate I decide to use, is certified by a CA, will this work? What sort of certificate do I need to install in the browser to keep it from complaining? Is the process the same if I want to do transparent proxying with this eventually?