Re: [squid-users] SslBump and bad cert

[Alex Crow]

E.g. if the server cert has expired, sign an expired squid cert to the 
browser. At least this will reproduce the same behavior as if the 
sslbump is not turned on. The browser will warn the certificate problem 
and the user can proceed at his own risk. The squid administrator can be 
kept out of the loop in dealing with not so well maintained server 
certificate.
Regards,
Ming


Sounds like it could work, but I don't know with openssl if it's even 
possible to generate a cert that has already expired!

Alex