<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Windows Updates is also incompatible with ECDSA due to akamai
behind. :)<br>
<br>
20.06.2016 17:19, Yuri Voinov пишет:<br>
<span style="white-space: pre;">><br>
> akamaihd.net has compatibility issues with ECDSA squid's
certs. fb.com behind it, etc.<br>
><br>
> 20.06.2016 0:10, Yuri Voinov пишет:<br>
><br>
><br>
> > ECDSA works with any combination with RSA in
CA-subordinate<br>
> CA's.<br>
><br>
><br>
><br>
> > Will check compatibility issues, if any.<br>
><br>
><br>
><br>
> > 19.06.2016 17:40, Amos Jeffries пишет:<br>
><br>
> > > On 19/06/2016 10:17 p.m., Yuri<br>
><br>
> > wrote:<br>
><br>
><br>
><br>
> > >> Must be:<br>
><br>
><br>
><br>
> > >><br>
><br>
><br>
><br>
> > >> openssl ecparam -name secp384r1
-genkey<br>
> -param_enc<br>
><br>
> > named_curve -out<br>
><br>
><br>
><br>
> > >> rootCA.key<br>
><br>
><br>
><br>
> > >><br>
><br>
><br>
><br>
> > >> :)<br>
><br>
><br>
><br>
> > >><br>
><br>
><br>
><br>
> > >> I.e. -param_enc can't be default,
named_curve<br>
> argument<br>
><br>
> > required :)<br>
><br>
><br>
><br>
> > >><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> > > Aha.<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> > > Is it working for you now? or do we
still have to<br>
> alter the<br>
><br>
> > cert<br>
><br>
><br>
><br>
> > > generator part of Squid?<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> > > Amos<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> > >
_______________________________________________<br>
><br>
><br>
><br>
> > > squid-users mailing list<br>
><br>
><br>
><br>
> > > <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
><br>
><br>
><br>
> > >
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
><br>
><br>
><br>
><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXZ9PrAAoJENNXIZxhPexGUM0H/0Fwzs4XrryZ2LahnO4OZ2e7
<br>
DzWcXLtyNNkzOj3oKeOWvijjTuTH4F4nTIot5yiZqifngY1NHXbh1RkePYEy57YP
<br>
31lgJOBqm9pwHDMKdBwDRz28Ln03HzRimirrhNhJLEXRbdMXZHn4No+qXkfQHjI2
<br>
IoXcwM/ITVLgQ8cAW03SFLgUJwdVlbVjNq3vl0o0ZmJZ0MzYJ2/OlkuvNweNJXmQ
<br>
YTFWAUrNLXr9T0RYmWjoTH6JDHUQz83F6n7/ceuWkTwoRZ0hhlFzGCqCSHLD9V+B
<br>
P2C0d5a7ccBdNlJOMK3FQ1jOuuBTI999fX2HfQWy5Qtojm0V2y4izWrU5f+CQLg=
<br>
=VnZ2
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>