Re: [squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-10 Thread Amos Jeffries
On 11/08/2016 11:44 a.m., erdosain9 wrote: > Thanks!it works!!!but... have this strange behavior in > access.log1470835274.046896 192.168.1.172 NONE/200 0 CONNECT > mail.google.com:443 - HIER_DIRECT/172.217.28.229 -1470835274.569521 > 192.168.1.172 TCP_MISS/204 406 GET

Re: [squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-10 Thread erdosain9
Thanks!it works!!!but... have this strange behavior in access.log1470835274.046896 192.168.1.172 NONE/200 0 CONNECT mail.google.com:443 - HIER_DIRECT/172.217.28.229 -1470835274.569521 192.168.1.172 TCP_MISS/204 406 GET https://mail.google.com/mail/gxlu? -

Re: [squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-09 Thread Amos Jeffries
On 10/08/2016 9:07 a.m., Erdosain9 wrote: > > *MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA* > > When i create self-signed certificate, i do like this: > >- > >openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes *-x509 > *-keyout myCA.pem -out myCA.pem > > > so what can i change to

[squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-09 Thread Erdosain9
Hi to all. I keep trying to achieve inspect https. I think I'm close to doing. This is my current configuration relative to ssl-bump. - # Squid listen Port http_port 192.168.1.215:3128 https_port 3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB