[squid-users] Squid 4: Cloudflare SSL connection problem

Yuri Voinov yvoinov at gmail.com
Thu Apr 14 14:38:06 UTC 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Any ideas?

Anybody?

13.04.16 2:37, Yuri Voinov пишет:
>
> I suggests the matter can be openssl not OS:
>
> root @ cthulhu /patch # openssl version -a
> OpenSSL 1.0.1s  1 Mar 2016
> built on: Tue Mar  1 15:42:26 2016
> platform: solaris64-x86_64-cc-sunw
> options:  bn(64,64) rc4(16x,int) des(ptr,cisc,16,int) idea(int)
blowfish(ptr)
> compiler: /opt/solarisstudio12.4/bin/cc -I. -I.. -I../include  -KPIC
-DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-DPK11_LIB_LOCATION="/usr/lib/64/libpkcs11.so" -DHAVE_ISSETUGID
-DAV_SPARC_FJAES=0 -xO3 -m64 -xstrconst -Xa -DL_ENDIAN
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
> OPENSSLDIR: "/etc/opt/csw/ssl"
>
>
> 13.04.16 2:29, Yuri Voinov пишет:
>
>
>       > root @ cthulhu /patch # dig www.cloudflare.com
>
>
>
>       > ; <<>> DiG 9.6-ESV-R11-P4 <<>>
>       www.cloudflare.com
>
>       > ;; global options: +cmd
>
>       > ;; Got answer:
>
>       > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR,
>       id: 32548
>
>       > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0,
>       ADDITIONAL: 0
>
>
>
>       > ;; QUESTION SECTION:
>
>       > ;www.cloudflare.com.            IN      A
>
>
>
>       > ;; ANSWER SECTION:
>
>       > www.cloudflare.com.     86400   IN      A     
>       198.41.214.162
>
>       > www.cloudflare.com.     86400   IN      A     
>       198.41.215.162
>
>
>
>       > ;; Query time: 538 msec
>
>       > ;; SERVER: 127.0.0.1#53(127.0.0.1)
>
>       > ;; WHEN: Wed Apr 13 02:28:34 ALMT 2016
>
>       > ;; MSG SIZE  rcvd: 68
>
>
>
>       > root @ cthulhu /patch # uname -a
>
>       > SunOS cthulhu 5.10 Generic_150401-30 i86pc i386 i86pc Solaris
>
>
>
>       > But I think OS does not matter here.
>
>
>
>       > 13.04.16 2:02, Eliezer Croitoru пишет:
>
>       > > What "dig www.cloudflare.com"
>
>       >       results with?
>
>
>
>       >       > Also what OS are you using? I am using CentOS 7 up
>       to date...
>
>
>
>
>
>
>
>       >       > Eliezer
>
>
>
>
>
>
>
>       >       > On 12/04/2016 21:39, Yuri Voinov wrote:
>
>
>
>       >       >> root @ cthulhu /patch # openssl s_client
>       -cipher
>
>       >       'ECDHE-ECDSA-AES128-GCM-SHA256' -connect
>       www.cloudflare.com:443
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>       >       > _______________________________________________
>
>
>
>       >       > squid-users mailing list
>
>
>
>       >       > squid-users at lists.squid-cache.org
>
>
>
>       >       > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXD6tOAAoJENNXIZxhPexGlRgIAI96ykwrDgOIzbTZoK9A3QyB
dZ3VcTRKMR9L0zZj7tu9lg8UoRBzKDMiETaIH2yiykaLw7V0leR0dK/8UkrZmNxw
XuiaKD0+zVPf1WlyG8BOilI67Y9wlzMaN4Q35niHseg5GGn1kSH90dz2TAjq3Vum
e5nV74J/bHJfuauOv4YQfA5uJ0m5nhOuYYViKqi+S0y/1nrpZEINhYaRZ5AKbDML
1zNQip16yFCPBd/g7HviKSmUliV2OE6byF4xWsaYWjoX9bCAXxIVhVs4ln4BHO6q
t3h85zGlI5MCmxMqkSa8D5XvTdJPUE9yyxMYeTfXq5ncBEQYJacgfisZxDwFr7U=
=bje3
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160414/040ba731/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160414/040ba731/attachment-0001.key>


More information about the squid-users mailing list