Re: [squid-users] Question about squid-3.5-13849.patch

2015-07-08 Thread Amos Jeffries
On 9/07/2015 2:33 a.m., Paulo Matias wrote: > Hi, > > On 07-07-2015 11:05, Amos Jeffries wrote: >> On 8/07/2015 1:37 a.m., dweimer wrote: >>> System is Running on FreeBSD 10.1-RELEASE-p14, using OpenSSL included in >>> base FreeBSD. >> >> No, the change is automatic for all Squid built against an

Re: [squid-users] Question about squid-3.5-13849.patch

2015-07-08 Thread dweimer
On 07/08/2015 9:33 am, Paulo Matias wrote: Hi, On 07-07-2015 11:05, Amos Jeffries wrote: On 8/07/2015 1:37 a.m., dweimer wrote: System is Running on FreeBSD 10.1-RELEASE-p14, using OpenSSL included in base FreeBSD. No, the change is automatic for all Squid built against an OpenSSL library t

Re: [squid-users] Question about squid-3.5-13849.patch

2015-07-08 Thread Paulo Matias
Hi, On 07-07-2015 11:05, Amos Jeffries wrote: > On 8/07/2015 1:37 a.m., dweimer wrote: >> System is Running on FreeBSD 10.1-RELEASE-p14, using OpenSSL included in >> base FreeBSD. > > No, the change is automatic for all Squid built against an OpenSSL > library that supports the library API option

Re: [squid-users] Question about squid-3.5-13849.patch

2015-07-07 Thread Amos Jeffries
On 8/07/2015 1:37 a.m., dweimer wrote: > I just updated to Squid 3.5.6 and after running QualSYS SSL Labs test it > still lists my server as supporting Secure Client-Initiated > Renegotiation and potentially being vulnerable to CVE-2009-3555 which > the patch >

[squid-users] Question about squid-3.5-13849.patch

2015-07-07 Thread dweimer
I just updated to Squid 3.5.6 and after running QualSYS SSL Labs test it still lists my server as supporting Secure Client-Initiated Renegotiation and potentially being vulnerable to CVE-2009-3555 which the patch inc