Re: [squid-users] Squid 4.0.x = SNI Support

2017-04-07 Thread Amos Jeffries
On 8/04/2017 1:05 a.m., Sebastien.Boulianne wrote: > Reverse proxy. > > Sébastien > > -Message d'origine- > De : Ralf Hildebrandt > > * Sebastien.Boulianne: >> Hi all, >> >> Anyone can confirm me if Squid 4.0.x support SNI ? > > SNI when doing what? ssl bump? > Maybe, but I don't

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
;-) No problem, Raf. This is really much better solution ;-) 07.04.2017 22:44, Rafael Akchurin пишет: > Hello Yuri, > > Yes this is much better solution! > > Best regards, > Rafael Akchurin > > Op 7 apr. 2017 om 18:20 heeft Yuri Voinov > het

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello Yuri, Yes this is much better solution! Best regards, Rafael Akchurin Op 7 apr. 2017 om 18:20 heeft Yuri Voinov > het volgende geschreven: # TAG: sslproxy_foreign_intermediate_certs #Many origin servers fail to send their full server

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
# TAG: sslproxy_foreign_intermediate_certs #Many origin servers fail to send their full server certificate #chain for verification, assuming the client already has or can #easily locate any missing intermediate certificates. # #Squid uses the certificates from the specified file

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
I would not install intermediate certificates in the system store. They have a much shorter validity period - this time, and two - there is a SQUID functionality that supports adding missing intermediate certificates from a separate file. For security reasons, intermediate certificates require

[squid-users] [squid-announce] Squid 4.0.19 beta is available

2017-04-07 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-4.0.19 release! This release is a bug fix release resolving several issues found in the prior Squid releases. The major changes to be aware of: * Bug #4671: various GCC 7 compile errors GCC 7 adds a number of

Re: [squid-users] netdbExchangeHandleReply: corrupt data, aborting

2017-04-07 Thread Sebastien.Boulianne
Hi, No, I have using Squid 3.5.24. Sébastien -Message d'origine- De : squid-users [mailto:squid-users-boun...@lists.squid-cache.org] De la part de Amos Jeffries Envoyé : 7 avril 2017 07:47 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] netdbExchangeHandleReply:

[squid-users] Squid 4.0.x = SNI Support

2017-04-07 Thread Sebastien.Boulianne
Hi all, Anyone can confirm me if Squid 4.0.x support SNI ? Thanks for all your answers. Sébastien. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] netdbExchangeHandleReply: corrupt data, aborting

2017-04-07 Thread Amos Jeffries
On 7/04/2017 9:49 a.m., Sebastien.Boulianne wrote: > Hi, > > Anyone can explain me how to fix that when I do "service squid status" please > ? > netdbExchangeHandleReply: corrupt data, aborting > Are you using Squid-4 ? The way Squid-3 and older operate causes horrible confusion inside

[squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello everyone, Added new article for intermediate certificates and X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error when bumping SSL. Hopefully will be helpful/interesting for someone https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html Best regards, Rafael