<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.E-mailStijl17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=NL link=blue vlink=blue>
<div class=Section1>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>> For example, in IE version 8, getting an error given below,<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>You can try to disable SSL3 in advanced options and enable TLS1.0 and/or
better <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>SSLV3 is absolete now. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>Van:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> squid-users
[mailto:squid-users-bounces@lists.squid-cache.org] <b><span style='font-weight:
bold'>Namens </span></b>Prasad Desai<br>
<b><span style='font-weight:bold'>Verzonden:</span></b> vrijdag 12 februari
2016 9:08<br>
<b><span style='font-weight:bold'>Aan:</span></b>
squid-users@lists.squid-cache.org<br>
<b><span style='font-weight:bold'>Onderwerp:</span></b> [squid-users] Facing
issue in Internet explorer</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>Hi,</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>I have successfully configured SSLBump Peek and Splice in
my transparent proxy and it is working as expected except in Internet explorer.</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>For example, in IE version 8, getting an error given
below,</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>(71) Protocol error (TLS code: SQUID_ERR_SSL_HANDSHAKE)</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>Handshake with SSL server failed: error:1409F07F:SSL
routines:SSL3_WRITE_PENDING:bad write retry</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>Below is squid.conf,</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>visible_hostname <a href="http://mysite.com/"
target="_blank">mysite.com</a></span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>httpd_suppress_version_string on</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>via off</span></font><font size=2><span style='font-size:
9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>forwarded_for delete</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>deny_info <a href="http://192.168.3.33/error.html"
target="_blank"><font color="red"><b> MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "192.168.3.33" </b></font> <b><font color=red><span style='color:red;font-weight:bold'>MailScanner
warning: numerical links are often malicious:</span></font></b>
http://192.168.3.33/error.html</a> blockfiles</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl lan src <a href="http://192.168.4.0/24"
target="_blank"><font color="red"><b> MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "192.168.4.0" </b></font> <b><font color=red><span style='color:red;font-weight:bold'>MailScanner
warning: numerical links are often malicious:</span></font></b> 192.168.4.0/24</a> <a
href="http://192.168.6.0/24" target="_blank"><font color="red"><b> MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "192.168.6.0" </b></font> <b><font color=red><span
style='color:red;font-weight:bold'>MailScanner warning: numerical links are
often malicious:</span></font></b> 192.168.6.0/24</a> <a
href="http://192.168.3.0/24" target="_blank"><font color="red"><b> MailScanner heeft een e-mail met mogelijk een poging tot fraude gevonden van "192.168.3.0" </b></font> <b><font color=red><span
style='color:red;font-weight:bold'>MailScanner warning: numerical links are
often malicious:</span></font></b> 192.168.3.0/24</a></span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access allow lan</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl SSL_ports port 443</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 80 # http</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 21 # ftp</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 443 # https</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 70 # gopher</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 210 # wais</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 1025-65535 # unregistered
ports</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 280 #
http-mgmt</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 488 #
gss-http</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 591 # filemaker</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl Safe_ports port 777 #
multiling http</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl CONNECT method CONNECT</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>strip_query_terms off</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access allow manager localhost</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access deny manager</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access deny !Safe_ports</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access deny CONNECT !SSL_ports</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_access deny all</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>sslproxy_flags DONT_VERIFY_PEER DONT_VERIFY_DOMAIN</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl disable-ssl-bump ssl::server_name
"/etc/squid/no-ssl-bump.acl"</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl BadSite ssl_error SQUID_X509_V_ERR_DOMAIN_MISMATCH</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>sslproxy_cert_error allow BadSite</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl step1 at_step SSLBump1</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl step2 at_step SSLBump2</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>acl step3 at_step SSLBump3</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>ssl_bump peek step1 all</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>ssl_bump splice step2 disable-ssl-bump</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>ssl_bump stare step2 all</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>ssl_bump splice step3 disable-ssl-bump</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>ssl_bump bump step3 all</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_port 3130</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>http_port 3128 intercept</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>https_port 3129 intercept ssl-bump
generate-host-certificates=on dynamic_cert_mem_cache_size=8MB
cert=/etc/squid/ssl_cert/myca.pem key=/etc/squid/ssl_cert/myca.pem</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>sslcrtd_program /usr/lib/squid/ssl_crtd -s /var/lib/ssl_db
-M 8MB</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>sslcrtd_children 8 startup=1 idle=1</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>coredump_dir /var/spool/squid</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>refresh_pattern ^ftp: 1440
20% 10080</span></font><font size=2><span
style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>refresh_pattern ^gopher: 1440 0%
1440</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>refresh_pattern -i (/cgi-bin/|\?) 0 0%
0</span></font><font size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>refresh_pattern . 0
20% 4320</span></font><font size=2><span style='font-size:
9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face="Times New Roman"><span style='font-size:
9.5pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Georgia><span style='font-size:9.5pt;
font-family:Georgia'>Any inputs to resolve this error will be much appreciated.</span></font><font
size=2><span style='font-size:9.5pt'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>-- <o:p></o:p></span></font></p>
<div>
<div>
<div>
<div>
<div>
<div style='text-align:start;word-spacing:0px'>
<p class=MsoNormal style='background:white'><font size=3 color="#222222"
face=Georgia><span style='font-size:12.0pt;font-family:Georgia;color:#222222'>Best,</span></font><font
color="#222222" face=Arial><span style='font-family:Arial;color:#222222'><o:p></o:p></span></font></p>
</div>
<div style='text-align:start;word-spacing:0px'>
<div>
<p class=MsoNormal style='background:white'><font size=3 color="#222222"
face=Georgia><span style='font-size:12.0pt;font-family:Georgia;color:#222222'>Prasad
Desai</span></font><font color="#222222" face=Arial><span style='font-family:
Arial;color:#222222'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal style='background:white'><font size=3 color="#222222"
face=Georgia><span style='font-size:12.0pt;font-family:Georgia;color:#222222'>Systems
Engineer</span></font><font color="#222222" face=Arial><span style='font-family:
Arial;color:#222222'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal style='background:white'><font size=3 color="#222222"
face=Arial><span style='font-size:12.0pt;font-family:Arial;color:#222222'><o:p> </o:p></span></font></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>