[squid-users] Squid 3.2.1 Reverse Proxy SSL Security

From: PSA4444 <sima_yi_at_operamail.com>
Date: Wed, 31 Jul 2013 18:00:50 -0700 (PDT)

I run some websites behind a squid reverse proxy with SSL enabled.

I ran the free SSL Labs assessment on it and found the following problems:

https://www.ssllabs.com/ssltest/

SSL_RSA_EXPORT_WITH_RC4_40_MD5 (0x3) WEAK 40
SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5 (0x6) WEAK 40
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA (0x8) WEAK 40
SSL_RSA_WITH_DES_CBC_SHA (0x9) WEAK 56

How can I disable these weak cipher suites?

I also want to disable TLS compression.

This is across all websites my websites.

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-2-1-Reverse-Proxy-SSL-Security-tp4661381.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Thu Aug 01 2013 - 01:01:33 MDT

This archive was generated by hypermail 2.2.0 : Thu Aug 01 2013 - 12:00:32 MDT