[squid-users] Squid4 with GnuTLS - specify ciphers or disable protocols

Amos Jeffries squid3 at treenet.co.nz
Sat Dec 29 21:17:22 UTC 2018


I think I have managed to track this down. It seems to be a side effect
of the session management being designed for OpenSSL where the context
implicitly shares details in the library between sessions linked to that
context. Under GnuTLS the sessions generated by clients connecting are
not inheriting details from the listening context+session state, where
they do under OpenSSL.

It may take a while to get that logic redesigned and the fix merged.

Amos


More information about the squid-users mailing list