squid: Disable SSL support

The SSL support parts of squid are a great security
risk. The majority of all security issues has been
in this area. As we are not using any of that in
production we can as well disable SSL support.

This won't affect squid's possibility to forward
SSL connections with the CONNECT method.
This commit is contained in:
Michael Tremer
2015-05-02 12:56:09 +02:00
parent 49c3105cc3
commit 88b1e637ac

View File

@@ -78,12 +78,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
--libexecdir=/usr/lib/squid \
--localstatedir=/var \
--disable-ipv6 \
--disable-ssl \
--enable-poll \
--disable-icmp \
--disable-wccp \
--enable-ident-lookups \
--enable-storeio="aufs,diskd,ufs" \
--enable-ssl \
--enable-underscores \
--enable-http-violations \
--enable-removal-policies="heap,lru" \