[squid-users] TCP_DENIED/403 after Upgrading from 3.4.4 to 3.4.7 (ssl_bump enabled)

Amos Jeffries squid3 at treenet.co.nz
Mon Oct 13 06:16:36 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 13/10/2014 6:26 p.m., Tom Tom wrote:
> Hi
> 
> Does anyone have some ideas/hints concerning this problem?

I am looking into it and fairly sure its a bug in how the ACL result
is returning 1 == ALLOWED. But that was done to solve another bug in
auth ACLs re-authenticating credentials from outside the encryption,
using the encrypted channel.

Am still trying to figure out what the appropriate fix might look like.

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUO25CAAoJELJo5wb/XPRjjH0IAM2OK8MGRgkaxqBpXo+wKXiQ
szuQfM3xSSUqXx6uFmD1IPssGRSy3ZxA5UBu5nVZB6X++nVGEkMwgjwo/dkymaw/
9egyKHGBBbVE1HjVi8/zktN01x1Tdrqo3fw6VpkzqQfsJAp5zt+/H4PjZvoRW11F
NrCAIFlAx5eymYPZVunVOgejBb3G0zINn76MY5SnIRFUOtJurooTKcQx8fPppo4r
yWYNLSrCxAq6ZKEqyHV0koiNp0ezjblwu53M8aZX1oXXdHjdcHwMKBBJ+x7CXhyj
/rHYScUsn1B16SsQ4azA3mnlmP7AZgxjiv0MRiGfsrB9sWLQFydzneQppPfvxVo=
=/B6U
-----END PGP SIGNATURE-----


More information about the squid-users mailing list