On 11/01/2016 11:51 p.m., Walter H. wrote: > > Ok, because the strange in connection with this: > > I had > > http_port 3128 ... dhparam=./dhparam.pem > > and before installing Kaspersky Anti-Virus there was not any error; but in > connection with the SSL-Interception of Kaspersky Anti-Virus, I got an SSL > error in Mozilla Firefox like "invalid server hello" > removing dhparam=... from http_port resolves this "issue"; dhparam enables state necessary for Diffie-Hellman ciphers (DH/DHE/EDH) to work. Without it they would be broken and not negotiated. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
