<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA1 <br>
<br>
You need openssl CA's bundle.<br>
<br>
Which can be specify with capath= parameter.<br>
<br>
08.02.2015 2:28, Hector Chan пишет:<br>
<span style="white-space: pre;">> Hi all,<br>
><br>
> I have a question about the CA file for SSL certificates. If
I don't specify anything for CA, what is default CA certs that
squid will use for the cache_peer ?<br>
><br>
> Here is a snippet of my config file.<br>
><br>
> https_port 127.0.0.1:4443 <a class="moz-txt-link-rfc2396E" href="http://127.0.0.1:4443"><http://127.0.0.1:4443></a> accel
\<br>
> cert=/etc/certs/certificate \<br>
> key=/etc/certs/key \<br>
> options=NO_SSLv2,NO_SSLv3<br>
> ...<br>
> cache_peer xyz.example.com <a class="moz-txt-link-rfc2396E" href="http://xyz.example.com"><http://xyz.example.com></a>
parent 443 0 \<br>
> no-query originserver \<br>
> ssl forceddomain= xyz.example.com
<a class="moz-txt-link-rfc2396E" href="http://xyz.example.com"><http://xyz.example.com></a> \<br>
> login=PASS \<br>
> sslcert=/etc/certs/certificate \<br>
> sslkey=/etc/certs/key \<br>
> ssloptions=NO_SSLv2,NO_SSLv3<br>
> ...<br>
><br>
> I am running squid-3.4.4 on CentOS 6.<br>
><br>
> Thanks,<br>
> Hector<br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBAgAGBQJU1nYtAAoJENNXIZxhPexG37YH/iN5GowI9WZOdUx7uVLTAlJn
<br>
+h7x1J/0vRLn0vb/KksGGbaJ0xdKUzFoLdvyYE8vhOpQnMX37zBKZgAmP1D/J5r+
<br>
+SOOiaxkG9pHoeqm3tvrVvCs8cQBOzHaweT1W7DORLSgigmOQWkHsq3vcYuAeQox
<br>
ext37UtLzsvuvZI/MbY9BIDya2qr51i67+w9cZkWeIVivnFDoA4zEHtFzQPzud+U
<br>
SXbkGBVYFVxbif+H8/6D6TyRBlBEo5meO7+T+0UDxd4Ny3vr/kZeVtW+iExmEulc
<br>
r/LESnctA/LAGBitDWpgcq7+xgwb1e20yvWio6UTNKORdDzYFY3cnJXDFzwuT1w=
<br>
=J6Qv
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>