On 19/06/2016 10:17 p.m., Yuri wrote: > Must be: > > openssl ecparam -name secp384r1 -genkey -param_enc named_curve -out > rootCA.key > > :) > > I.e. -param_enc can't be default, named_curve argument required :) > Aha. Is it working for you now? or do we still have to alter the cert generator part of Squid? Amos