Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Alex Rousskov
On 7/21/20 3:41 AM, Dieter Bloms wrote: > for some sites like https://mycase.cloudapps.cisco.com/ > squid doesn't fetch the intermediate certificate and returns > X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY The underlying problem is not specific to SslBump AFAICT. The combination of

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Dieter Bloms
Hello Matus, thank you for your answer. On Tue, Jul 21, Matus UHLAR - fantomas wrote: > On 21.07.20 09:41, Dieter Bloms wrote: > > we use the sslbump feature and it works very well. > > But some sites can't be reached because of missing intermediate > > certificate. > > > > In squid.conf we

[squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Dieter Bloms
Hello, we use the sslbump feature and it works very well. But some sites can't be reached because of missing intermediate certificate. In squid.conf we have configured the following parameters: --snip-- # allow fetching of missing intermediate certificates acl fetch_intermediate_certificate

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Matus UHLAR - fantomas
On 21.07.20 09:41, Dieter Bloms wrote: we use the sslbump feature and it works very well. But some sites can't be reached because of missing intermediate certificate. In squid.conf we have configured the following parameters: --snip-- # allow fetching of missing intermediate certificates acl