LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 12-18-2014, 11:20 AM   #1
!! hack-back !!
Member
 
Registered: Nov 2009
Posts: 183

Rep: Reputation: 2
squid3 gives error: Error negotiating SSL connection


the error is
fwdNegotiateSSL: Error negotiating SSL connection on FD 102: error:00000000:lib(0):func(0):reason(0) (5/0/0


too many errors in cache.log but https pages load but slowly.

what i use
apt-get install gcc devscripts build-essential sharutils openssl libssl-dev fakeroot libcppunit-dev libsasl2-dev cdbs ccze libfile-readbackwards-perl libcap2 libcap-dev libcap2-dev sysv-rc-conf


./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid --localstatedir=/var/spool/squid --enable-http-violations --datadir=/usr/share/squid --enable-async-io=32 --with-aufs-threads=32 --with-included-ltdl --enable-ltdl-convenience --with-pthreads --enable-storeio=aufs --enable-icap-client --enable-kill-parent-hack --disable-wccp --disable-wccpv2 --enable-ssl --enable-linux-netfilter --disable-ident-lookups --disable-select --enable-ssl-crtd --enable-zph-qos --enable-arp-acl --enable-epoll --enable-removal-policies=lru,heap --enable-snmp --enable-referer-log --disable-unlinkd --enable-x-accelerator-vary --with-dl --with-openssl --enable-truncate --enable-useragent-log --enable-eui --enable-esi --with-aio --enable-follow-x-forwarded-for --enable-large-cache-files --with-large-files --with-maxfd=65536 CFLAGS="-Wall -g -O3 -march=native -mtune=native -pipe -DNUMTHREADS=60 -fomit-frame-pointer -fno-strict-aliasing -funroll-loops -ffast-math -fno-exceptions" LDFLAGS="-Wl,-Bsymbolic-functions"




my squid.conf
https://pastee.org/svzdd


iptables

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 172.192.111.100:3128
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 443 -j DNAT --to 172.192.111.100:3127
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ERROR 2026 (HY000): SSL connection error: SSL_CTX_set_default_verify_paths failed prw8864 Linux - Software 1 11-15-2014 09:24 PM
[SOLVED] SSL Connection Error JJJCR Linux - Security 13 10-03-2013 09:56 PM
[SOLVED] SSL connection error . call_krushna Linux - Server 6 03-26-2013 11:10 AM
[SOLVED] Error on SVN checkout: SSL handshake failed: SSL error: Key usage violation in certif jsaravana87 Linux - Server 3 05-07-2012 10:00 AM
How to force Squid3 to use SSL connection between the client and the server Mycado Linux - Server 1 09-17-2010 03:34 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration