[squid-users] Squid 4: Cloudflare SSL connection problem

Yuri Voinov yvoinov at gmail.com
Tue Apr 12 11:55:50 UTC 2016


Does anybody faces this problem with 4.0.8:

https://i1.someimage.com/3lD2cvV.png

?

It accomplished this error in cache.log:

2016/04/12 17:39:38 kid1| Error negotiating SSL on FD 54: 
error:00000000:lib(0):func(0):reason(0) (5/0/0)

and "NONE/503" in access.log.

Without proxy works like sharm. 3.5.16 with the similar squid.conf works 
like sharm.

NB: Cloudflare support said, that they key feature for SSL is SNI and 
ECDSA now. AFAIK, 4.0.8 is fully supports this features.

Any advice will be helpful.

Yes, I know this looks like DDoS protection on Cloudflare. But WTF? Any 
workaround required. Half-Internet is hosted on Cloudflare.

WBR, Yuri


More information about the squid-users mailing list