[squid-users] net::err_cert_common_name_invalid just in squid page with dstdomain block

Matus UHLAR - fantomas uhlar at fantomas.sk
Thu Dec 7 15:27:41 UTC 2017


On 07.12.17 08:05, erdosain9 wrote:
>Yes, Chrome tell this when i look the certificate
>
>"The certificate for this site does not contain a Subject Alternative Name
>extension containing a domain name or IP address."

are you aware that this is not a squid problem?

>So, my certificate does not have a Subject Alternative Name.
>But, this is not a problem with Firefox.

only with certificates issued after some date, not sure when, but it will
come.

>I have to change my certificate?? t
>There is a way to tell Chrome "dont look for this"???

only by using chrome <58

the CommonName does not have documented format, the SubjectAlternativeName
does.


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
He who laughs last thinks slowest. 


More information about the squid-users mailing list