I've disabled SSLv3 with this option set in my squid.conf file:

sslproxy_options NO_SSLv3 NO_SSLv2

But despite that fact, the squid proxy accepted the configuration without any problems, I still get SSLv3 connections working. I've sniffed the traffice on that interface on the proxy port and if I do a SSLv3 connection from the browser and do a poodle check, the sniffing protocol shows an established SSLv3 connection.

Can someone tell me if I missed something here?
Is there some option which could override the sslproxy_options setting?
How can I check if the sslproxy_options are really being used?

Thank you in advance.
Best regards
Sebastian
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to