[squid-users] Squid blocking own OCSP/AIA requests

Alex Rousskov rousskov at measurement-factory.com
Wed Mar 22 15:12:57 UTC 2017


On 03/22/2017 07:20 AM, Markus Wernig wrote:
> Small update:
> 
> - The URL ... is the AIA for the Root CA
> 
> Since squid is sslbumping the connection, it must be doing the AIA
> lookups (presumably for SSL verification). Does anybody have an idea why
> it is blocking its own requests?

My answer has not changed:

http://lists.squid-cache.org/pipermail/squid-users/2017-March/014773.html

Did you expect your update to change that answer?

Alex.



More information about the squid-users mailing list