Synopsis
When Squid is used as a proxy server for https://URLs, this tag is used to defines the nature of SSL’s behaviour.
Arguments
| Flags |
Meaning |
| DONT_VERIFY_PEER |
Accept certificates even if they fail to verify |
| NO_DEFAULT_CA |
Don’t use the default CA list built in to OpenSSL |
| NO_SESSION_REUSE |
Don’t allow for session reuse. Each connection will result in a new SSL session. |
| VERIFY_CRL |
Verify CRL lists when accepting client certificates |
| VERIFY_CRL_ALL |
Verify CRL lists for all certificates in the client certificate chain |
Example(s)
sslproxy_flags NO_DEFAULT_CA
|