How can I tell where to put this file, or which ca-bundle.crt file to chain this to? I did a find on my system, and there are two files. one in /usr/share/apps/kssl, and the other in /usr/share/ssl/certs.
squid_GATEWAY_ssl-2.5.patch has been applied before compile. -----Original Message----- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Thursday, January 08, 2004 3:01 PM To: Schaefer, Charles Cc: [EMAIL PROTECTED] Subject: Re: [squid-users] Verisign cert problem On Thu, 8 Jan 2004, Schaefer, Charles wrote: > How can I tell where I need to put the new intermediate.crt file I just got > from Verisign? They signed my cert on 12/29/03 with their cert that expired > on 1/7/04! Now I have to jump through a hoop to fix it. If you are running Squid as an SSL accelerator server then you need to chain the intermediary certificate to your certificate. This is done by placing them both in the same certificate file. However, if using Squid-2.5 then you also need the SSL update patch available from http://devel.squid-cache.org/ or modify the source to use SSL_CTX_use_certificate_chain_file(sslContext, certfile) instead of SSL_CTX_use_certificate_file(sslContext, certfile, SSL_FILETYPE_PEM) Regards Henrik
