[squid-users] Squid 4.5 and intermediate CA

[eliezer at ngtech.co.il]

There is no way to automatically add ROOT CA into browsers or software....
If a software does that it's only based on a pre-defined rules.
At my page:
http://ngtech.co.il/static/myCA/autoinstaller/

There are three examples and one of them is for linux (Ubuntu,Debian,CentOS).

You can see the right mime headers for the der(also cer) and pem formats.
(use curl...)

Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il


-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of FredB
Sent: Wednesday, January 16, 2019 17:48
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Squid 4.5 and intermediate CA

Hi Amos,

Yes it works, and I guess I found where the problem is, this is a 
pkix-cert mime type and I wonder, but maybe I'm wrong, that Squid can't 
use the file

openssl x509 -inform DER -in myfile shows the CA as text file, after 
that I can use the CA file with browser unable to download CA (wget for 
example)

Perhaps this is a "bug" because pkix-cert is used by browsers (or 
clients software) to automatically adds CA

https://www.iana.org/assignments/media-types/application/pkix-cert

FredB


_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users