<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
UPDATE:<br>
<br>
Every failed connect produce the next sequence in access.log:<br>
<br>
1460474791.631 15444 192.168.100.103 NONE_ABORTED/200 0 CONNECT
198.41.215.162:443 - ORIGINAL_DST/198.41.215.162 -<br>
1460474791.658 0 192.168.100.103 NONE/503 3951 GET
<a class="moz-txt-link-freetext" href="https://www.cloudflare.com/*">https://www.cloudflare.com/*</a> - HIER_NONE/- text/html<br>
<br>
Note: 198.41.215.162 is current cloudflare.com IP.<br>
<br>
Also: NONE_ABORTED/200 is often occurs in access.log with another
accessible sites.<br>
<br>
12.04.16 20:03, Yuri Voinov пишет:<br>
<span style="white-space: pre;">><br>
> UPDATE:<br>
><br>
> <a class="moz-txt-link-freetext" href="https://i1.someimage.com/b8w5dFz.png">https://i1.someimage.com/b8w5dFz.png</a><br>
><br>
> This is answer from Cloudflare support.<br>
><br>
> But: 3.5.16 can deal with ECDSA TLS 1.2 but 4.0.8 not?<br>
><br>
> 12.04.16 17:55, Yuri Voinov пишет:<br>
> > Does anybody faces this problem with 4.0.8:<br>
><br>
> > <a class="moz-txt-link-freetext" href="https://i1.someimage.com/3lD2cvV.png">https://i1.someimage.com/3lD2cvV.png</a><br>
><br>
> > ?<br>
><br>
> > It accomplished this error in cache.log:<br>
><br>
> > 2016/04/12 17:39:38 kid1| Error negotiating SSL on FD
54:<br>
> error:00000000:lib(0):func(0):reason(0) (5/0/0)<br>
><br>
> > and "NONE/503" in access.log.<br>
><br>
> > Without proxy works like sharm. 3.5.16 with the similar
squid.conf<br>
> works like sharm.<br>
><br>
> > NB: Cloudflare support said, that they key feature for
SSL is SNI and<br>
> ECDSA now. AFAIK, 4.0.8 is fully supports this features.<br>
><br>
> > Any advice will be helpful.<br>
><br>
> > Yes, I know this looks like DDoS protection on
Cloudflare. But WTF?<br>
> Any workaround required. Half-Internet is hosted on
Cloudflare.<br>
><br>
> > WBR, Yuri<br>
><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXDRRPAAoJENNXIZxhPexGmZcIAI1gcVCHUjCrDk0vI/f7omMP
<br>
ALa5XYk0VrsoOioc5cIh0DuIRN8THqkdXxtRXdKnxC8hgRfvOxN6h7NFilZhVAiT
<br>
tvgQkmKxAXXkCXik03AYU5DBoElMDcCgznksAxcckvXGCyWxN7pFwSY2p87WPHa/
<br>
5G/K5BTG1rf30OjVYIMPRtsfkHyA5xWIPNHKcbu6bCsV7H+oXh8x8oCNHdF06Q1i
<br>
s3U1kiFEudOKC1bMGVY4RJlzqDgGdANsHMSh0/v3rS4it5KBFxPsuz/DDcU1DlkO
<br>
MIEMF7FgvxORtgBZPUnxa+sF5gunZqDuv2R2aJuxJpYK2OriOC7+e40dZiw7xpQ=
<br>
=/LGq
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>