[squid-users] cache_peer - ssloptions / sslv3

[Amos Jeffries]

On 11/02/2016 9:08 a.m., Yuri Voinov wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>  
> The http://bugs.squid-cache.org/show_bug.cgi?id=4429 is returns :)
> 
> Re-open this bug again :)
> 
> Awful bug strikes back :D
> 

Yes it is that bug.

However, "latest" Squid is now 4.0.5, with the bug fixed.

Amos


> 11.02.16 1:43, Florian Stamer пишет:
>> Hi,
>>
>> here http://www.squid-cache.org/Versions/v4/cfgman/cache_peer.html it
> sais, that
>>
>> ssloptions=...  ALL       Enable various bug workarounds
>>                            suggested as "harmless" by OpenSSL
>>                        Be warned that this reduces SSL/TLS
>>                        strength to some attacks.
>>
>> is an usable parameter.
>>
>> If i try it on 4.0.4 / latest Build i get the error
>>
>> FATAL: Unknown TLS option 'LL'
>>
>> I need this parameter to get 4.x working as a reverse proxy for
> Exchange 2010.
>>
>> Is it possible to force sslv3 traffic for the reverse (cache_peer) part?
>>
>> Mit freundlichen Grüßen
>>
>> Florian Stamer
>> Geprüfter IT-Projektleiter
>> Technischer Leiter
>>
>> Tel. +49 421 43420-531
>> Mobil +49 170 5740120
>> florian.stamer at basys-bremen.de
>>
>> BASYS Bartsch EDV-Systeme GmbH | Hermine-Seelhoff-Str. 1-2 | 28357 Bremen
>> www.basys-bremen.de | info at basys-bremen.de | Tel: +49 421 43420-30 |
> Fax: +49 421 49148-30
>> Amtsgericht Bremen HRB 11898 | VAT-ID DE114401047
>> Vertreten durch Geschäftsführer: Dr. Stephan Michaelsen, Olaf Brandt
>>
>>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>  
> iQEcBAEBCAAGBQJWu5jIAAoJENNXIZxhPexGtN4H+QFmss3fNitu91eroFVvbhs1
> OkXUYwLxE2qYfi4i+8h6PjkfPh34eFTh88WBdSvuUolpaDnUne1LA6CS3dhVyFA8
> GEnvU4yXZOPfAqcAP23ZVBdsz6wmWNcTX6Vd8QyYW5SkS5yBBy4inGa0IB6wgQKP
> /OrhLiHI7QIDEEH+5LGoGzxVnfdLHxRRo6upXlzm4DDgWmyAxkuxqeMWftaa+Pkr
> B5THLXI6KSjugEdXtc59s4ebvXNBYohUjAd4bRurOxZ/zIgxzbAnhH7YNZhgvruX
> FFDwi3fRFvFE+ZQSYg86GVx+zgAiy95XXnRMH/m9MR5rMgmUJapsPH3EtnNlfDI=
> =IFb0
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>