[squid-dev] squid-cache.org TLS certificate errors

Adam Majer amajer at suse.de
Tue Oct 31 09:45:35 UTC 2023


Hi,

Not really about squid, but more about the web hosting. Going to 
https://www.squid-cache.org gets a wrong certificate error,



Websites prove their identity via certificates. Firefox does not trust 
this site because it uses a certificate that is not valid for 
www.squid-cache.org. The certificate is only valid for the following 
names: *.spd.co.il, spd.co.il

Error code: SSL_ERROR_BAD_CERT_DOMAIN


# openssl s_client -connect www.squid-cache.org:443 -servername 
www.squid-cache.org | openssl x509 -noout -text | grep 'DNS\|CN='

This seems to hit some random mirror?


Without `www`, it's still broken as the certificate is missing the main 
domain,

# openssl s_client -connect squid-cache.org:443 -servername 
squid-cache.org | openssl x509 -noout -text | grep 'DNS\|CN='

depth=0 CN = master.squid-cache.org
                 DNS:bugs.squid-cache.org, DNS:lists.squid-cache.org, 
DNS:master.squid-cache.org


Is it at least possible to add squid-cache.org to the non-mirrored site?

Best regards,
Adam


More information about the squid-dev mailing list