Search squid archive

Re: Reverse Proxy SSL 3.0

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



mån 2006-07-17 klockan 16:06 -0400 skrev Brad Taylor:

> https_port 443 cert=/etc/squid/sbcert.pem
> key=/etc/squid/sbprivatekey.pem version=2
> 
> When I change to 3:
> https_port 443 cert=/etc/squid/sbcert.pem
> key=/etc/squid/sbprivatekey.pem version=3
> 
> I get a "page can not be displayed" in IE.

Probably IE sends a SSLv2 session setup with upgrade to SSLv3/TLS. If
you set the protocol to 3 then only SSLv3 session setups is accepted and
clients sending SSLv2 session setups will get rejected even if they
indicate they accept upgrade to SSLv3 or TLS.

Try disabling SSLv2 via the options= instead.. This keeps the
"automatic" session setup mode, and only restricts the end result..

Regards
Henrik

Attachment: signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux