Re: [squid-users] ssl_bump problems with pypi servers

On 5/26/20 7:43 PM, hanxie wrote: > The problem is that occasionally requests to "https://pypi.org"; will > time out. I believe you are dealing with a TLS v1.3 server. TLS v1.3 fakes its handshakes to pretend that they are TLS v1.2 handshakes. However, IIRC, those fake handshakes do not end with

Re: [squid-users] ssl_bump problems with pypi servers

Hi Alex thanks for the response! I have posted a link to a larger log snippet that was the more full trace from the previous request. Let me know if I could provide anything else as well. squid_debug.txt -- Se

Re: [squid-users] ssl_bump problems with pypi servers

On 5/26/20 7:43 PM, hanxie wrote: > We have tried turning on verbose debugging and I think I have found the logs > in which squid encounters an error with the request: I did not find anything particularly suspicious in that log snippet. I suggest posting a link to a much larger, compressed log sa

[squid-users] ssl_bump problems with pypi servers

Hi all, I am experiencing somewhat of a strange error with squid using ssl-bump. I think I am running a somewhat typical set up in which we run a squid proxy server fleet that is used by our other servers and we use "ssl_bump" to man-in-the-middle all our traffic. The problem is that occasional