Re: [squid-dev] [RFC] removal of SSL version options

2015-04-16 Thread Amos Jeffries
On 16/04/2015 5:35 p.m., Alex Rousskov wrote: On 04/15/2015 06:17 AM, Amos Jeffries wrote: Squid currently has several version options to set the SSL/TLS protocol version. http(s)_port ... version= cache_peer ... sslversion sslproxy_version ... However, 1) the option configures

Re: [squid-dev] [RFC] removal of SSL version options

2015-04-16 Thread Alex Rousskov
On 04/16/2015 12:45 AM, Amos Jeffries wrote: On 16/04/2015 5:35 p.m., Alex Rousskov wrote: On 04/15/2015 06:17 AM, Amos Jeffries wrote: Squid currently has several version options to set the SSL/TLS protocol version. http(s)_port ... version= cache_peer ... sslversion

[squid-dev] [RFC] removal of SSL version options

2015-04-15 Thread Amos Jeffries
Squid currently has several version options to set the SSL/TLS protocol version. http(s)_port ... version= cache_peer ... sslversion sslproxy_version ... However, 1) the option configures version X-only. Which does not follow with current best practice of most other TLS enabled software

Re: [squid-dev] [RFC] removal of SSL version options

2015-04-15 Thread Alex Rousskov
On 04/15/2015 06:17 AM, Amos Jeffries wrote: Squid currently has several version options to set the SSL/TLS protocol version. http(s)_port ... version= cache_peer ... sslversion sslproxy_version ... However, 1) the option configures version X-only. Which does not follow with