did a 'openssl dhparam -out dhparams.pem 4096' to generate the dhparams.pem file, and added those into the squid.conf: http_port 3129 ssl-bump cert=/usr/local/squid/etc/ssl_cert/myCA.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MB *options=SINGLE_DH_USE:SINGLE_ECDH_USE tls-dh=/usr/local/squid/etc/dhparams.pem* when the client software include the ciphersuites of the above mentioned, still fail the TLS negotiation. Do I configured this incorrectly? thanks. - George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users