enable ssl

Bug #1436899 reported by Juan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
squid3 (Ubuntu)
New
Undecided
Unassigned

Bug Description

Squid3 is not accepting https requests, with reason.

`squid3 -k parse` reveals

Processing: https_port 8889 cert=/etc/squid3/ssl/local.lan.crt key=/etc/squid3/ssl/local.lan.key
ERROR: 'https_port' requires --enable-ssl

please add --enable-ssl to future builds unless there's a reason it's being omitted.

required information:
-----
lsb_release -rd
Description: Ubuntu 14.10
Release: 14.10
-----
apt-cache policy squid3
squid3:
  Installed: 3.3.8-1ubuntu8.1
  Candidate: 3.3.8-1ubuntu8.1
  Version table:
 *** 3.3.8-1ubuntu8.1 0
        500 http://us.archive.ubuntu.com/ubuntu/ utopic-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ utopic-security/main amd64 Packages
        100 /var/lib/dpkg/status
     3.3.8-1ubuntu8 0
        500 http://us.archive.ubuntu.com/ubuntu/ utopic/main amd64 Packages

i do feel that omitting SSL from configuration during build is a security risk and as such i am marking it as a security vulnerability.

thank you

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

It's not compiled with SSL support because of licensing reasons.

affects: squidguard (Ubuntu) → squid3 (Ubuntu)
information type: Private Security → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.