Re: [squid-dev] [PATCH] remove USE_CHUNKEDMEMPOOLS

2017-01-12 Thread Amos Jeffries
On 12/01/2017 8:53 a.m., Kinkie wrote: > Please go ahead when it's convenient for you. > Applied as v5 rev.15008. Amos ___ squid-dev mailing list squid-dev@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-12 Thread Christos Tsantilas
On 12/01/2017 06:48 μμ, Alex Rousskov wrote: On 01/12/2017 08:35 AM, Christos Tsantilas wrote: The patch fixes Squid to peeks (or stares) at the origin server as configured, even if it does not recognize the client TLS record/message. s/to peeks (or stares)/to peek (or stare)/ I agree that

Re: [squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-12 Thread Alex Rousskov
On 01/12/2017 08:35 AM, Christos Tsantilas wrote: > The patch fixes Squid to peeks (or stares) at the origin server as > configured, even if it does not recognize the client TLS > record/message. s/to peeks (or stares)/to peek (or stare)/ I agree that this is the right thing to do, but I have

[squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-12 Thread Christos Tsantilas
If Squid receives a valid TLS Hello encapsulated into ancient SSLv2 records (observed on Solaris 10) the old code ignored the step2 peek decision and bumped the transaction instead. The patch fixes Squid to peeks (or stares) at the origin server as configured, even if it does not recognize