[squid-dev] [PATCH] Add chained certificates and signing certificate to bumpAndSpliced connections

Amos Jeffries squid3 at treenet.co.nz
Fri May 22 05:44:14 UTC 2015

On 30/04/2015 5:11 p.m., Nathan Hoad wrote:
> Hello,
> I am running Squid with SSL bump in bump and splice mode, and I've
> observed that this mode does not append the signing certificate or any
> chained certificates to the certificate chain presented to the client.
> With old bump mode, Squid adds the signing certificate and any other
> chained certificates to the SSL context. With bump and splice mode,
> these certificates are not added. Attached is a patch that adds these
> certificates for bump and spliced connections.
> Thank you,
> Nathan.

Absent any objections I will apply this in a few days.

Christos: I would appreciate your input if possible.


More information about the squid-dev mailing list