with dhparam.pem

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [0.0.5](https://sigyl.com/git/stack/squid/compare/v0.0.4...v0.0.5) (2020-08-06)
+
+
+### Bug Fixes
+
+* added dhparam.pem ([bd1e63d](https://sigyl.com///commit/bd1e63d3c23fedb951c96b0ed378ab7489e0b033))
+
 ### [0.0.4](https://sigyl.com/git/stack/squid/compare/v0.0.3...v0.0.4) (2020-08-05)
 
 ### [0.0.3](https://sigyl.com/git/stack/squid/compare/v0.0.2...v0.0.3) (2020-08-05)

docker/README.md

@@ -0,0 +1,3 @@
+I made dhparam.pem
+
+    openssl dhparam -outform PEM -out dhparam.pem 2048

docker/dhparam.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAk5sKJOAoHj9bZCoUyN0pnYwjzS2vCZWcNOCGKVO+MuyVhbphVGez
+UidUVK7OIFX5XUNfrHvxKeN2NkHHfOJXAYdVD/0Th6Ead+nh/xtBw9+ycRhmLR1F
+tQY1Kbv23j8h+rJ0q5aiMnCEKevnbPBlV3ARK1oXjAHVuT08flGOcRLb3Qp+qLKQ
+xX5WGQcFzVJf56MA/bl5bUbuo7e8O1eZYjdtzz+nvk8zaYqEhqrrPkJDPveGdVKu
+FYB4vRfBuOHc/1K9+kwzfNsAYhj51Qs64KjukmpjxZPTVojvnKRqiavRmgBdMWiL
+J8VStE1njcXhusk3jGJazeQ5EsJA9u41qwIBAg==
+-----END DH PARAMETERS-----

docker/squid.intercept.conf

@@ -28,7 +28,7 @@ htcp_access deny all
 
 visible_hostname git.local-domain
 
-http_port 3128 ssl-bump generate-host-certificates=on cert=/apps/CA_crt.pem key=/apps/CA_key.pem
+http_port 3128 ssl-bump generate-host-certificates=on cert=/apps/CA_crt.pem key=/apps/CA_key.pem options=NO_SSLv3 dhparams=/apps/dhparam.pem
 
 always_direct allow all
 acl excluded_sites ssl::server_name .wellsfargo.com

package.json

@@ -1,6 +1,6 @@
 {
   "private": true,
-  "version": "0.0.4",
+  "version": "0.0.5",
   "scripts": {
     "release": "standard-version",
     "release:message": "standard-version --releaseCommitMessageFormat",