LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   squid3 gives error: Error negotiating SSL connection (https://www.linuxquestions.org/questions/linux-server-73/squid3-gives-error-error-negotiating-ssl-connection-4175528666/)

!! hack-back !! 12-18-2014 11:20 AM

squid3 gives error: Error negotiating SSL connection
 
the error is
fwdNegotiateSSL: Error negotiating SSL connection on FD 102: error:00000000:lib(0):func(0):reason(0) (5/0/0


too many errors in cache.log but https pages load but slowly.

what i use
apt-get install gcc devscripts build-essential sharutils openssl libssl-dev fakeroot libcppunit-dev libsasl2-dev cdbs ccze libfile-readbackwards-perl libcap2 libcap-dev libcap2-dev sysv-rc-conf


./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid --localstatedir=/var/spool/squid --enable-http-violations --datadir=/usr/share/squid --enable-async-io=32 --with-aufs-threads=32 --with-included-ltdl --enable-ltdl-convenience --with-pthreads --enable-storeio=aufs --enable-icap-client --enable-kill-parent-hack --disable-wccp --disable-wccpv2 --enable-ssl --enable-linux-netfilter --disable-ident-lookups --disable-select --enable-ssl-crtd --enable-zph-qos --enable-arp-acl --enable-epoll --enable-removal-policies=lru,heap --enable-snmp --enable-referer-log --disable-unlinkd --enable-x-accelerator-vary --with-dl --with-openssl --enable-truncate --enable-useragent-log --enable-eui --enable-esi --with-aio --enable-follow-x-forwarded-for --enable-large-cache-files --with-large-files --with-maxfd=65536 CFLAGS="-Wall -g -O3 -march=native -mtune=native -pipe -DNUMTHREADS=60 -fomit-frame-pointer -fno-strict-aliasing -funroll-loops -ffast-math -fno-exceptions" LDFLAGS="-Wl,-Bsymbolic-functions"




my squid.conf
https://pastee.org/svzdd


iptables

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 172.192.111.100:3128
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 443 -j DNAT --to 172.192.111.100:3127


All times are GMT -5. The time now is 01:55 PM.