[squid-users] Trying to set up SSL cache - solved!

Alex Rousskov rousskov at measurement-factory.com
Thu Feb 24 19:22:25 UTC 2022


On 2/24/22 13:24, Dave Blanchard wrote:
> ssl_bump client-first all
> ssl_bump stare all
> ssl_bump splice localhost

Bugs notwithstanding, the above configuration is equivalent to the 
configuration below:

     ssl_bump client-first all

The following wiki page can be used to find out what each ssl_bump 
action is supposed to be doing. Legacy actions mentioned there, 
including client-first, should be treated as unsupported, having unknown 
side effects, and meant to be removed from Squid (yesterday). YMMV.

https://wiki.squid-cache.org/Features/SslPeekAndSplice

squid.conf.documented documents how multiple ssl_bump rules are handled, 
but that documentation is difficult to interpret correctly without the 
step documentation at the above wiki page.

Alex.


More information about the squid-users mailing list