-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 30.08.15 21:52, Amos Jeffries пишет: > On 29/08/2015 12:17 a.m., Oliver Webb wrote: >> Thanks for your reply Amos. I will explain a bit more of my setup in the hope it clarifies a few of the issues. >> >> I have installed the certificate portion of squids key/cert into the trusted root store of all the devices concerned all clients see the "server's" certificate as being signed by squid's private key not the origin servers. >> I have the following line in squid.conf to specifically stop the use of SSL >> sslproxy_options NO_SSLv2 NO_SSLv3 SINGLE_DH_USE > > The OpenSSL options list is ':' or ',' separated. Not spaces. > > What you have there is actually just: > > sslproxy_options NO_SSLv2 Amos, this is not obvious. And nowhere clear documented, AFAIK. In Squid documentation. Read any and all sources is no substitute for good documentation. Am I right or I am absolutely right? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJV40MnAAoJENNXIZxhPexG2mcH/0HLNazE3sR8v7D4BUL6pwDS otlGC3hxY2O23BCo4Lnd6PdiV/biPs5ceoezqjwBzL65157jkq3Uvk+YjQXwYLdU svN2BR2i9ZNns8wTpsyT3fDj6ILOFW+NbhnUbsAVfdQ3YsZM97Q8BmM92Idibzik /O5aDqjWrhbCbB033warzTXyn4ag6pQ1Y03OC6Zs4kJsr8gdG9rRW16zCKIzCnrk sAZtTT2w4IuKi5qffn+rQ9b04Qp31snFDYPnTb8oN0jWQnT9VvjvhCNjjNKCmBZU zsqUyZ9w6C5hnOT5ShGgSH8DVz7dLqPFlijNCmxdtoafC529WWkj+faXxwP2vGc= =UOmz -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
