Re: [squid-users] 4.17 and 5.3 SSL BUMP issue: SSL_ERROR_RX_RECORD_TOO_LONG

2022-01-24 Thread Alex Rousskov
> Sent: Monday, January 24, 2022 16:54 > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] 4.17 and 5.3 SSL BUMP issue: > SSL_ERROR_RX_RECORD_TOO_LONG > > On 1/24/22 2:42 AM, Eliezer Croitoru wrote: >> 2022/01/24 09:11:20 kid1| SECURITY ALERT: Host header

Re: [squid-users] 4.17 and 5.3 SSL BUMP issue: SSL_ERROR_RX_RECORD_TOO_LONG

2022-01-24 Thread Eliezer Croitoru
To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] 4.17 and 5.3 SSL BUMP issue: SSL_ERROR_RX_RECORD_TOO_LONG On 1/24/22 2:42 AM, Eliezer Croitoru wrote: > 2022/01/24 09:11:20 kid1| SECURITY ALERT: Host header forgery detected on > local=142.250.179.228:443 remote=10.200.191.171:51

Re: [squid-users] 4.17 and 5.3 SSL BUMP issue: SSL_ERROR_RX_RECORD_TOO_LONG

2022-01-24 Thread Alex Rousskov
On 1/24/22 2:42 AM, Eliezer Croitoru wrote: > 2022/01/24 09:11:20 kid1| SECURITY ALERT: Host header forgery detected on > local=142.250.179.228:443 remote=10.200.191.171:51831 FD 16 flags=33 (local > IP does not match any domain IP) As you know, Squid improvements related to these messages have

[squid-users] 4.17 and 5.3 SSL BUMP issue: SSL_ERROR_RX_RECORD_TOO_LONG

2022-01-23 Thread Eliezer Croitoru
Hey, I have been testing both Squid 4.17 and 5.3 (yet to test 6.x) The issue I have seen is pretty annoying operationally. Other products on the market resolve this issue with couple techniques and I assume it shouldn't be a problem to configure it. It's a special case that was raised due to the