Re: [squid-users] Unable to Disable sslv3

2018-09-13 Thread Amos Jeffries
On 14/09/18 3:35 AM, Alex Rousskov wrote: > On 09/12/2018 10:27 PM, Amos Jeffries wrote: > >> OpenSSL options to disable SSLv3 were not added until Squid-3.2 when >> TLS-only support was added. > > What makes you think that? AFAICT, support for disabling SSLv3 on > https_port was added years

Re: [squid-users] Unable to Disable sslv3

2018-09-13 Thread Alex Rousskov
On 09/12/2018 10:27 PM, Amos Jeffries wrote: > OpenSSL options to disable SSLv3 were not added until Squid-3.2 when > TLS-only support was added. What makes you think that? AFAICT, support for disabling SSLv3 on https_port was added years before Squid v3.1 was branched:

Re: [squid-users] Unable to Disable sslv3

2018-09-12 Thread Amos Jeffries
On 13/09/18 12:54 PM, Alex Rousskov wrote: > On 09/12/2018 03:47 PM, squid wrote: > >> We are using squid as reverse proxy and we have disabled SSLv3 : > >> https_port XXX.XXX.XXX.XXX:443 accel defaultsite=www.example.com >> vhost cert=/etc/cert.pem key=/etc/privkey.pem >>

Re: [squid-users] Unable to Disable sslv3

2018-09-12 Thread Alex Rousskov
On 09/12/2018 03:47 PM, sq...@buglecreek.com wrote: > We are using squid as reverse proxy and we have disabled SSLv3 : > https_port XXX.XXX.XXX.XXX:443 accel defaultsite=www.example.com > vhost cert=/etc/cert.pem key=/etc/privkey.pem >

[squid-users] Unable to Disable sslv3

2018-09-12 Thread squid
I asked this some time ago and am bringing it up again to see if there are any suggestions since we haven't been able to fix it. We are using squid as reverse proxy and we have disabled SSLv3 : https_port XXX.XXX.XXX.XXX:443 accel defaultsite=www.example.com vhost cert=/etc/cert.pem