[squid-users] cache_peer - ssloptions / sslv3

Florian Stamer florian.stamer at basys-bremen.de
Wed Feb 10 19:43:56 UTC 2016


Hi,

here http://www.squid-cache.org/Versions/v4/cfgman/cache_peer.html it sais, that

ssloptions=...  ALL       Enable various bug workarounds
                           suggested as "harmless" by OpenSSL
                       Be warned that this reduces SSL/TLS
                       strength to some attacks.

is an usable parameter.

If i try it on 4.0.4 / latest Build i get the error

FATAL: Unknown TLS option 'LL'

I need this parameter to get 4.x working as a reverse proxy for Exchange 2010.

Is it possible to force sslv3 traffic for the reverse (cache_peer) part?

Mit freundlichen Grüßen

Florian Stamer
Geprüfter IT-Projektleiter
Technischer Leiter

Tel. +49 421 43420-531
Mobil +49 170 5740120
florian.stamer at basys-bremen.de

BASYS Bartsch EDV-Systeme GmbH | Hermine-Seelhoff-Str. 1-2 | 28357 Bremen
www.basys-bremen.de | info at basys-bremen.de | Tel: +49 421 43420-30 | Fax: +49 421 49148-30
Amtsgericht Bremen HRB 11898 | VAT-ID DE114401047
Vertreten durch Geschäftsführer: Dr. Stephan Michaelsen, Olaf Brandt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160210/db888853/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 9849 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160210/db888853/attachment.bin>


More information about the squid-users mailing list