Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
;-) No problem, Raf. This is really much better solution ;-) 07.04.2017 22:44, Rafael Akchurin пишет: > Hello Yuri, > > Yes this is much better solution! > > Best regards, > Rafael Akchurin > > Op 7 apr. 2017 om 18:20 heeft Yuri Voinov > het

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello Yuri, Yes this is much better solution! Best regards, Rafael Akchurin Op 7 apr. 2017 om 18:20 heeft Yuri Voinov > het volgende geschreven: # TAG: sslproxy_foreign_intermediate_certs #Many origin servers fail to send their full server

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
# TAG: sslproxy_foreign_intermediate_certs #Many origin servers fail to send their full server certificate #chain for verification, assuming the client already has or can #easily locate any missing intermediate certificates. # #Squid uses the certificates from the specified file

Re: [squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Yuri Voinov
I would not install intermediate certificates in the system store. They have a much shorter validity period - this time, and two - there is a SQUID functionality that supports adding missing intermediate certificates from a separate file. For security reasons, intermediate certificates require

[squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

2017-04-07 Thread Rafael Akchurin
Hello everyone, Added new article for intermediate certificates and X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error when bumping SSL. Hopefully will be helpful/interesting for someone https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html Best regards, Rafael