Hi! I’m using squid from long time, as my network
isn’t ipv6 enabled, I’ve disabled it in squid using dns_v4_first on tcp_outgoing_address 0.0.0.0 all and on the interface network script on centos IPV6INIT=no With this configuration, all worked fine for long
time with squid 3.5.23. But Friday I’ve update the squid/squid helpers
packages (now I’m at 3.5.27), and I’ve enabled ssl_bump with the
following lines: ssl_bump none localhost ssl_bump stare ssl_bump bump all http_port 8080 ssl-bump cert=/etc/squid/certificate.pem
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB And now, on few sites (including https://wiki.squid-cache.org/),
it try to open with ipv6 with the following error: Connection to 2001:4801:7827:102:ad34:6f78:b6dc:fbed
failed. I’ve tried to disable ssl_bump (using only “http_port
For now I’ve “fixed” using the
following lines: acl no_ssl_interception dstdomain .squid-cache.org ssl_bump none no_ssl_interception On the problematic websites. How I can get rid of the ipv6?? Thanks! |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users