[squid-users] sslbump and google cert error

[Ming Fu]

I was using squid 3.1.0.16 icap + sslbump

The following log is from command
curl -x "10.1.19.16:3128" -k "https://www.google.com";

What is the error number 20 and 27 for?


2010/03/12 10:47:56.569| ClientHttpRequest::httpStart: NONE for 
'https://www.google.com/'
2010/03/12 10:47:56.569| clientProcessRequest2: StoreEntry is NULL -  MISS
2010/03/12 10:47:56.569| SSL unknown certificate error 20 in 
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| bypassing SSL error 20 in 
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| SSL unknown certificate error 27 in 
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| bypassing SSL error 27 in 
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| SSL Certificate signature OK: 
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| Verifying server domain www.google.com to 
certificate dn /C=US/ST=California/L=Mountain View/O=Google 
Inc/CN=www.google.com
2010/03/12 10:47:56.812| Verifying server domain www.google.com to 
certificate cn www.google.com
2010/03/12 10:47:56.953| Iterator.cc(171) updatePlan: no 
service-proposed plan received

Thanks,
Ming

--
Ming Fu | Senior Developer
WatchGuard Technologies, Inc. | www.watchguard.com

(905)-804-1855 ext 229
fm...@watchguard.com

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Get red. Get secured.