Pretty sure this is affecting our 3.5.x systems as well — we use a very similar splicing implementation.
I'll keep an eye out in hope someone adapts that patch!
Dan
On 12 August 2016 at 06:22, Alex Rousskov <rousskov@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
On 08/11/2016 10:56 AM, Steve Hill wrote:
> At ssl_bump step 2 we splice the connection and Squid does verification
...
> Unfortunately, when verification fails, rather than actually dropping
> the client's connection, Squid just leaves the client hanging.
Hi Steve,
This sounds very similar to Squid bug 4508. Factory proposed a fix
for that bug, but the patch is for Squid v4. You may be able to adapt it
to v3. Testing (with any version) is very welcomed, of course:
http://bugs.squid-cache.org/show_bug.cgi?id=4508
Alex.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
