[squid-users] https://wiki.squid-cache.org provides invalid certificate chain ...

[Alex Crow]

On 18/11/17 12:56, Walter H. wrote:
> On 18.11.2017 13:51, Walter H. wrote:
>> Hello,
>>
>> still certificate issues: missing intermediate certificate
>>
>> Greetings,
>> Walter
> @Amos:
>
>>  There is
>>  *no* chain. Our cert is directly signed by the LetsEncrypt CA.
>>  Amos
>
> that's wrong;  LetsEncrypt is only an intermediate, and MUST be given 
> by the server,
> as it isn't in any Trust Store by default.
>
>

Yep, I use LE and an it has a root CA and an intermediate - mine has:

DSA Root CA X3 -> Let's Encrypt Authority X3 -> <my Domain>.

Cheers

Alex


--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.

"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).