Re: [squid-users] SSL negotiation errors on https_port

2019-10-17 Thread Alex Rousskov
On 10/17/19 4:52 PM, Robert wrote: > I see many lines like these in the cache.log file: > 2019/10/17 22:38:33.552 kid1| Error negotiating SSL connection on FD 44: > error:0001:lib(0):func(0):reason(1) (1/-1) OpenSSL refused to accept a TLS client connection with a generic SSL_ERROR_SSL:

[squid-users] SSL negotiation errors on https_port

2019-10-17 Thread Robert
Hi there, I have configured squid's https_port for client certificate authorization: https_port [2001:XXX:XX:XXX::2]:8008 cert=/etc/ssl/private/mydomain_de/mydomain_de.crt key=/etc/ssl/private/mydomain_de/mydomain_de.key clientca=/etc/squid/ssl-proxy/ca.crt tls-dh=/etc/squid/ssl/dh_2048.pem T