I think I have managed to track this down. It seems to be a side effect of the session management being designed for OpenSSL where the context implicitly shares details in the library between sessions linked to that context. Under GnuTLS the sessions generated by clients connecting are not inheriting details from the listening context+session state, where they do under OpenSSL. It may take a while to get that logic redesigned and the fix merged. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users