<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Could it be related to this ??<div><br></div><div>"<span style="caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; background-color: rgb(245, 245, 245);">WARNING: Failed to decode EC parameters '/etc/dh-parameters.2048'. error:1E08010C:DECODER routines::unsupported</span><font color="#333333" face="Menlo, Monaco, Consolas, Courier New, monospace" size="2"><span style="caret-color: rgb(51, 51, 51);">”</span></font></div><div><br></div><div><div><br><blockquote type="cite"><div>On Apr 10, 2024, at 08:38, Alex Rousskov <rousskov@measurement-factory.com> wrote:</div><br class="Apple-interchange-newline"><div><div>On 2024-04-10 10:50, Jonathan Lee wrote:<br><br><blockquote type="cite">I am getting the following error in 6.6 after a upgrade from 5.8 does anyone know what this is caused by?<br>SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR<br></blockquote><br> $ openssl errstr A000417<br> error:0A000417:SSL routines::sslv3 alert illegal parameter<br><br>I think I have seen that error code before, but I do not recall the exact circumstances. Sorry! The error happens when Squid tries to accept (or peek at) a TLS connection from the client. Might be prohibited TLS version/feature, TLS greasing, or non-TLS traffic? Try examining client TLS Hello packet(s) in Wireshark.<br><br>Alex.<br><br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>https://lists.squid-cache.org/listinfo/squid-users<br></div></div></blockquote></div><br></div></body></html>