Re: [squid-users] Ssl-bump deep dive (self-signed certs in chain)

2015-05-28 Thread James Lay
Thanks for this AmosI will try and do more experimenting this week with more results. James On Tue, 2015-05-26 at 19:46 +1200, Amos Jeffries wrote: On 26/05/2015 4:26 a.m., James Lay wrote: So following advice and instructions on this page:

Re: [squid-users] Ssl-bump deep dive (self-signed certs in chain)

2015-05-26 Thread Amos Jeffries
On 26/05/2015 4:26 a.m., James Lay wrote: So following advice and instructions on this page: http://wiki.squid-cache.org/Features/DynamicSslCert I have set up my lab with explicit proxy by exporting http_proxy and https_proxy. After creating the self-signed root CA certificate above and

Re: [squid-users] Ssl-bump deep dive (self-signed certs in chain)

2015-05-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hm. Interesting. You want to say, you uses ordinal server certificate, signed with external trusted CA? And users can't see MiTM? 25.05.15 22:26, James Lay пишет: So following advice and instructions on this page:

[squid-users] Ssl-bump deep dive (self-signed certs in chain)

2015-05-25 Thread James Lay
So following advice and instructions on this page: http://wiki.squid-cache.org/Features/DynamicSslCert I have set up my lab with explicit proxy by exporting http_proxy and https_proxy. After creating the self-signed root CA certificate above and creating the .der file for the client, here are