On 4/30/19 8:04 AM, Giacomo Trovato wrote: > I've pfSense with Squid + SquidGuard (Splice All - no CA certificate). > It worked well until one month ago, now sometimes appears the error > message SSL_ERROR_RX_RECORD_TOO_LONG (see attachment). > It appears randomly on all PC / smartphone on different HTTPS sites. > The devices connected directly (no proxy) work properly. > Any hint? What is your current Squid version? The browser claims that your Squid sent it a very long (most likely malformed) TLS record. If this does not happen without Squid, then this is likely a Squid bug. I see references to similar problems in old (Squid v3) web posts. * If you can reproduce with Squid v4 or later, the best next step is to share a packet capture of the offending transaction along with the cache.log after setting debug_options to ALL,9. Please compress large files before sharing. * If you cannot reproduce with Squid v4 or later, then the best next step is to upgrade your Squid. HTH, Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
