Re: [squid-dev] Error while executing squid with ssl support

2017-01-25 Thread Amos Jeffries
On 20/01/2017 2:52 p.m., salil GK wrote: > Hello > >I have recompiled squid package. I gave options --with-openssl > --enable-ssl switche. But while executing squid, I am getting the following > error > > > ~/squid -N -Y -d 5 -f /tmp/minsquid.conf > > /tandberg/squid:

Re: [squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-25 Thread Alex Rousskov
On 01/25/2017 12:12 PM, Christos Tsantilas wrote: >> On 25/01/2017 08:24 μμ, Alex Rousskov wrote: >> * A client-sent ClientHello is required for peeking. The calling code >> must ensure that we never get here without it. Throw if our calling code >> is buggy. > This is the correct. Great. I have

Re: [squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-25 Thread Christos Tsantilas
On 25/01/2017 08:24 μμ, Alex Rousskov wrote: On 01/16/2017 04:38 AM, Christos Tsantilas wrote: On 13/01/2017 07:04 μμ, Alex Rousskov wrote: The dependency here is that clientHelloMessage comes from our parser. We can substitute OpenSSL-generated ClientHello with client-sent ClientHello

Re: [squid-dev] [PATCH] SSLv2 records force SslBump bumping despite a matching step2 peek rule.

2017-01-25 Thread Alex Rousskov
On 01/16/2017 04:38 AM, Christos Tsantilas wrote: > On 13/01/2017 07:04 μμ, Alex Rousskov wrote: >> The dependency here is that clientHelloMessage comes from our parser. We >> can substitute OpenSSL-generated ClientHello with client-sent >> ClientHello because/if we successfully parsed and stored

Re: [squid-dev] [PATCH] Mitigate DoS attacks that use client-initiated SSL/TLS renegotiation.

2017-01-25 Thread Christos Tsantilas
The patches r15016 and r15017 requires to allow make check/distcheck work in some platoforms. I am attaching a new patch for squid-3.5. On 24/01/2017 02:55 μμ, Christos Tsantilas wrote: The t3 patch applied to squid-5 as r15014 I am also attaching the patch for squid-3.5. On 23/01/2017