Re: ssl_engine

[ answering because nobody else has, I have no direct experience with 
that particular setup. ]


On 5/03/25 18:03, Jonathan Lee wrote:
> Hello fellow Squid Users can you please help?
> 
> Does anyone know how to set ssl_engine to use devcrypto for use with a 
> safexcel accelerator?
> 

  ssl_engine devcryptoeng


BUT "ssl_engine" is ...

> 
> 	Not supported in builds with OpenSSL 3.0 or newer.
> 


If your Squid is built for libssl 3.0 or later, you may be able to 
configure /etc/ssl/openssl.cnf default provider to be the one you want. 
Such that Squid does not have to do anything for it to work.


I expect all the details relating to how devcrypto does its thing to be 
configured in /etc/ssl/openssl.cnf.

You may find this discussion from the OpenSSL community helpful:
  <https://github.com/openssl/openssl/issues/10701>

(FTR; the

HTH
Amos