[squid-users] Disable tls1.3 support , can't get SNI / cert details when it's used

Stilyan Georgiev stilyangeorgiev at gmail.com
Tue Feb 26 11:55:29 UTC 2019


Hi,

Squid 4.5 with openssl support here.
SSL bumping can't obtain SNI / cert domain to perform filtering when 
tls1.3 is used.
I want to disable support for tls1.3 in config but don't find way to do 
so. There's the outdated sslproxy_options config directive which doesn't 
appear to be supported in 4.5

The goal is - allow everything , besides tls1.3

Thanks in advance.



More information about the squid-users mailing list