[squid-users] Howto set SSL_OP_IGNORE_UNEXPECTED_EOF in squid.conf for outgoing tls session with enabled ssl_bump

[Dieter Bloms]

Hello Amos,

On Sat, Nov 01, Amos Jeffries wrote:

> On 01/11/2025 04:38, Dieter Bloms wrote:
> > Hello Alex,
> > 
> > thank you for your answer,
> > yes, with:
> > 
> > tls_outgoing_options options=0x80
> > 
> > squid doesn't complain this parameter anymore and is running, but I think it will not be taken in account.
> > 
> > I still get the errorpage "ERR_READ_ERROR" when I try to reach https://www.zeitwertkonten.ruv.de/web/webSealContent/login/login.do with enabled bumping.
> > 
> 
> Did you do a full shutdown and restart for Squid?
>  If not, please try that just in case there is old session state hanging
> around.

yes, full restart.

> Is the error pages reporting the same error message and OpenSSL
> "error:0A000126" code with and without the setting?

I don't see such message in the error page, because it is from type ERR_READ_ERROR not ERR_SECURE_CONNECT_FAIL

Here the output:

--snip--
The following error was encountered while trying to retrieve the URL: https://www.zeitwertkonten.ruv.de/web/webSealContent/login/login.do
    Read Error
The system returned: [No Error]
An error condition occurred while reading data from the network. Please retry your request.
Your cache administrator is xxxx at yyyyy.
--snip--

Shall I enable debug mode and send the cache.log to you are Alex?


-- 
Regards

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.