[squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

[Amos Jeffries]

On 10/08/2016 9:07 a.m., Erdosain9 wrote:
> 
> *MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA*
> 
> When i create self-signed certificate, i do like this:
> 
>    -
> 
>    openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes *-x509
> *-keyout myCA.pem  -out myCA.pem
> 
> 
> so what can i change to avoid the problem???

A quick search brings up other people with the same problem who solved
it by adding the "-extensions v3_ca" option to the command for creating
the CA certificate.

Amos