[squid-users] Disable DLS compression in squid reverse proxy on Ubuntu

From: PSA4444 <sima_yi_at_operamail.com>
Date: Mon, 14 Oct 2013 18:19:42 -0700 (PDT)

I am trying to disable TLS compression in squid 3.2 running in reverse proxy
mode.
It's running on Ubuntu 12.04.

root_at_ip-10-0-0-xx:~# openssl s_client -connect localhost:443
...
Compression: zlib compression
Expansion: zlib compression
    Compression: 1 (zlib compression)

As opposed to:

Compression: NONE
Expansion: NONE

#This is my https port setup:
https_port 443 accel cert=/path/to/cert.cert key=/path/to/key.pem vhost
defaultsite=www.mysite.com
cipher=ALL:!aNULL:!eNULL:!LOW:!EXP:!ADH:!RC4+RSA:+HIGH:+MEDIUM:!SSLv2

#And I have tried the no_comp ssl flag. (We need the DONT_VERIFY_PEER for
now):
sslproxy_flags DONT_VERIFY_PEER no_comp

Has the situation changed since this:
http://www.squid-cache.org/mail-archive/squid-users/201210/0166.html

?

Has anyone else managed to disable tls compression in Ubuntu 12.04?

Cheers

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Disable-DLS-compression-in-squid-reverse-proxy-on-Ubuntu-tp4662637.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Tue Oct 15 2013 - 01:20:25 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 15 2013 - 12:00:05 MDT