[squid-users] Squid3 Support for TLS 1.1 and TLS 1.2

Dieter Bloms squid at bloms.de
Fri Nov 6 13:20:38 UTC 2015


On Fri, Nov 06, Fullyrealized LLC wrote:

> I have been trying to bolster my pfsense systems and found one
> difficulty with squid3. I cant figure out how to allow for support of
> tls 1.1 and 1.2. It supports tls 1 of course but the new reports from
> qualys give a "C" for such. I am wondering if there is a way to add
> support for the newer TLS 1.1 and 1.2 to Squid3 reverse proxy. Can
> anyone help?

it depends on you openssl version.
If you use an old 0.9.x version tls1.1 and above is not supported.
You have to use openssl 1.x.x to get support for it.



I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.

More information about the squid-users mailing list