[squid-users] Internet Explorer error with SSL bumping

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


30.08.15 21:52, Amos Jeffries пишет:
> On 29/08/2015 12:17 a.m., Oliver Webb wrote:
>> Thanks for your reply Amos. I will explain a bit more of my setup in
the hope it clarifies a few of the issues.
>>
>> I have installed the certificate portion of squids key/cert into the
trusted root store of all the devices concerned all clients see the
"server's" certificate as being signed by squid's private key not the
origin servers.
>> I have the following line in squid.conf to specifically stop the use
of SSL
>>     sslproxy_options NO_SSLv2 NO_SSLv3 SINGLE_DH_USE
>
> The OpenSSL options list is ':' or ',' separated. Not spaces.
>
> What you have there is actually just:
>
>  sslproxy_options NO_SSLv2
Amos, this is not obvious. And nowhere clear documented, AFAIK. In Squid
documentation.

Read any and all sources is no substitute for good documentation.

Am I right or I am absolutely right?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJV40MnAAoJENNXIZxhPexG2mcH/0HLNazE3sR8v7D4BUL6pwDS
otlGC3hxY2O23BCo4Lnd6PdiV/biPs5ceoezqjwBzL65157jkq3Uvk+YjQXwYLdU
svN2BR2i9ZNns8wTpsyT3fDj6ILOFW+NbhnUbsAVfdQ3YsZM97Q8BmM92Idibzik
/O5aDqjWrhbCbB033warzTXyn4ag6pQ1Y03OC6Zs4kJsr8gdG9rRW16zCKIzCnrk
sAZtTT2w4IuKi5qffn+rQ9b04Qp31snFDYPnTb8oN0jWQnT9VvjvhCNjjNKCmBZU
zsqUyZ9w6C5hnOT5ShGgSH8DVz7dLqPFlijNCmxdtoafC529WWkj+faXxwP2vGc=
=UOmz
-----END PGP SIGNATURE-----