[squid-users] reverse proxy setup

Amos Jeffries squid3 at treenet.co.nz
Fri Dec 11 04:50:50 UTC 2015


On 11/12/2015 4:52 p.m., Alex Samad wrote:
> Hi
> 
> 
> Is there any way to remove these from the log
> 
> kid1| Error negotiating SSL connection on FD 38: error:140760FC:SSL
> routines:SSL23_GET_CLIENT_HELLO:unknown protocol (1/-1)
> 
> this is the corrosponding squid config
> options=NO_SSLv2:NO_SSLv3:NO_TLSv1:SINGLE_DH_USE:CIPHER_SERVER_PREFERENCE
> 
> Not I don't get this when I re enable tlsv1..

Strange. Usually that means non-TLS traffic being passed to the HTTPS
port. For example, clients opening plain-text HTTP connections to it.

> 
> I am presuming I can ignore these.

That is always up to you. In this case somebody is getting broken
traffic, and your logs are filling with the messages saying so.

Amos



More information about the squid-users mailing list