[squid-dev] thanks for help

[Amos Jeffries]

On 06/11/17 13:50, G~D~Lunatic wrote:
> thanks for help . because i'm a primary programmer, so my question maybe 
> very concreteness.
> 
> My purpose is complete a proxy . Now the problem is some https website 
> can't be reached. so i suppose that the certificate of those https 
> website were not parsed ,then the public key or the private key was not 
> gotten.

Do not make guesses. TLS is quite complex with many pieces to its puzzle.

You need to start with *exact* error which is occuring and find out 
which piece of software is generating it. Work from there to find out 
the cause.


> In my code of squid3.5.10 , there is a file named ../src/ssl/support.cc  
> . I wonder whether store_session_cb() or other similar function was 
> responsible to establish ssl session ,then calls the openssl internal 
> function.
> very very thank you.
> 

First thing to do when debugging TLS issues is to upgrade to the latest 
Squid. TLS is changing constantly these days, so a Squid from over two 
years ago is unlikely to work 100% with todays traffic.

Amos