Re: [squid-users] Disable SSLv3 Not working

2018-04-02 Thread Amos Jeffries
On 03/04/18 03:48, squid wrote: > I missed that I needed that setting (sslproxy_options) in a reverse proxy > mode of operation. We haven't had to use any pf the sslproxy_* options. I'll > test that and see if it takes care of the issue. > It may or may not, that depends on the answer to the

Re: [squid-users] Disable SSLv3 Not working

2018-04-02 Thread squid
I missed that I needed that setting (sslproxy_options) in a reverse proxy mode of operation. We haven't had to use any pf the sslproxy_* options. I'll test that and see if it takes care of the issue. Does this option need to be placed anywhere specifically in the config? Also, does this re

Re: [squid-users] Disable SSLv3 Not working

2018-03-30 Thread Amos Jeffries
On 31/03/18 11:41, squid wrote: > We are using squid as reverse proxy and we have disabled SSLv3 : > > https_port ... > options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE,CIPHER_SERVER_PREFERENCE > cipher=ECDHE-ECDSA . . .. dhparams=/etc/...dhparams.pem NP: Squid-3.5 or later is required for EC cipher sup