Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign

2018-02-05 Thread Adam Majer
On 02/02/2018 11:08 AM, Eliezer Croitoru wrote: > Great to hear about this. > > The RPM's for 4.0.x latest already built and I'm starting to work on the near > step towards which I hope is 4.1.0. > I hope that by 4.1 I will have packages for Debian 9. > Are we expecting 4.1 to be released sooner

Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign

2018-02-02 Thread Eliezer Croitoru
@lists.squid-cache.org Subject: Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign The final part of the proposal quoted below are now PR'd for audit. There are several differences from the initial proposal; * the ServerOptions::signingCa class changes and new default for generate-host

Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign

2018-02-01 Thread Amos Jeffries
The final part of the proposal quoted below are now PR'd for audit. There are several differences from the initial proposal; * the ServerOptions::signingCa class changes and new default for generate-host-certificates have allowed a far simpler back-compat check using the non-existence of a

Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign

2017-08-09 Thread Eliezer Croitoru
I have not used v4 yet but the arguments stand for themselves. +1 Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-dev [mailto:squid-dev-boun...@lists.squid-cache.org] On Behalf Of Amos

Re: [squid-dev] [RFC] http(s)_port TLS/SSL config redesign

2017-08-09 Thread Alex Rousskov
On 07/19/2017 07:27 PM, Amos Jeffries wrote: > Hi all, Christos and Alex particularly, > > I have been mulling over several ideas for how to improve the config > parameters on the http(s)_port to make them a bit easier for newbies to > get right, and pros to do powerfully cool stuff. > > > So,