<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
This is most probably client certificate error. IM or something. You
can ignore it if users not compliances.<br>
<br>
18.01.16 3:13, Roman Gelfand пишет:<br>
<span style="white-space: pre;">> I am not sure where I am going
wrong here...<br>
><br>
><br>
> ssl bump certificate<br>
> openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes
-x509 -keyout<br>
> squidCA.pem -out squidCA.pem<br>
><br>
> The der certificate was generated and deployed on client
computer trusted<br>
> root<br>
> openssl x509 -in squidCA.pem -outform DER -out squidCA.der<br>
><br>
><br>
> squid.conf<br>
> http_port 3128 ssl-bump generate-host-certificates=on<br>
> dynamic_cert_mem_cache_size=4MB
cert=/usr/local/ssl_cert/squidCA.pem<br>
><br>
><br>
> On Sun, Jan 17, 2016 at 1:58 PM, Yuri Voinov
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><yvoinov@gmail.com></a> wrote:<br>
><br>
>><br>
> No.<br>
><br>
> 18.01.16 0:56, Roman Gelfand пишет:<br>
> >>> I am getting an error, below, in a cache.log.
How can I identify the<br>
> >>> request associated with this error? It doesn't
appear to be an issue<br>
> with<br>
> >>> client-to-proxy. It seems like a problem with
proxy-to-remote_server.<br>
> >>><br>
> >>> Error negotiating SSL on FD 43:
error:14090086:SSL<br>
> >>> routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed<br>
> >>><br>
> >>><br>
> >>><br>
> >>> _______________________________________________<br>
> >>> squid-users mailing list<br>
> >>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> >>>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
>><br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
>><br>
>><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJWnAROAAoJENNXIZxhPexGiYoIAKGr+aaDXmQpEK7bm295Sod+
<br>
q53gTVZgEe5BqX24pG2GYTjbh9sVNNQmBsOo3Vit3/iDd4lfr+mWYVVFgx7amFCo
<br>
i7ij6oUHeDYeviumldb3lWGQ9H8hEGfGNT4AF41OFg9R/bnj89sJSU80i+rQDiVz
<br>
FGZQCFMKAgPZm/EqJABh2/KgdAuJi386klqxq+42LAF94ANDzykcyqaozkYp4cMy
<br>
voguB4ZcyCMwHxlvXf9nWqbDc5p82JsYc+Ye25Pka5bO3UrGXK6lzqWjwXeVDamT
<br>
UIO0FLxk4PrCom+wdldFbUtqJUf02cexthYyBdIYSLQgKkmvjJaWfM8y10zqs8s=
<br>
=Dtmn
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>