mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
squid: Disable SSL support
The SSL support parts of squid are a great security risk. The majority of all security issues has been in this area. As we are not using any of that in production we can as well disable SSL support. This won't affect squid's possibility to forward SSL connections with the CONNECT method.
This commit is contained in:
@@ -78,12 +78,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
||||
--libexecdir=/usr/lib/squid \
|
||||
--localstatedir=/var \
|
||||
--disable-ipv6 \
|
||||
--disable-ssl \
|
||||
--enable-poll \
|
||||
--disable-icmp \
|
||||
--disable-wccp \
|
||||
--enable-ident-lookups \
|
||||
--enable-storeio="aufs,diskd,ufs" \
|
||||
--enable-ssl \
|
||||
--enable-underscores \
|
||||
--enable-http-violations \
|
||||
--enable-removal-policies="heap,lru" \
|
||||
|
||||
Reference in New Issue
Block a user