<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.9600.17041"></HEAD>
<BODY><SPAN lang=en id=result_box><SPAN
title="Es posible usar SSL_bump en mi servidor squid 3.5.23, si mi cache padre (cache_peer) no usa ssl_bump (no configurado).
">It
is possible to use SSL_bump on my squid server 3.5.23, if my parent cache
(cache_peer) does not use ssl_bump (not configured).<BR><BR></SPAN><SPAN
title="# Cuando intento acceder un https://
"># When I try to access an
https: //<BR></SPAN><SPAN
title="# Con esta configuracion:
"># With this
setting:<BR><BR></SPAN><SPAN
title="http_port 127.0.0.1:3129 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/myCA.pem
">http_port
127.0.0.1:3129 ssl-bump generate-host-certificates=on
dynamic_cert_mem_cache_size=4MB
cert=/etc/squid/ssl_cert/myCA.pem<BR>sslproxy_options
NO_SSLv2,NO_SSLv3,SINGLE_DH_USE<BR>ssl_bump none localhost<BR>ssl_bump
server-first all<BR>sslproxy_flags DONT_VERIFY_PEER<BR>sslproxy_cert_error allow
all</SPAN><SPAN
title="sslproxy_cert_error allow all
"><BR><BR></SPAN><SPAN
title="# cache.log reporta este error:
"># Cache.log reports this
error:<BR></SPAN><SPAN
title='assertion failed: PeerConnector.cc:116: "peer->use_ssl"
'>assertion
failed: PeerConnector.cc:116: "peer->use_ssl"<BR><BR></SPAN><SPAN
title="# Con esta configuración:
"># With this setting:<BR></SPAN><SPAN
title="http_port 127.0.0.1:3129 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/myCA.pem
">http_port
127.0.0.1:3129 ssl-bump generate-host-certificates=on
dynamic_cert_mem_cache_size=4MB
cert=/etc/squid/ssl_cert/myCA.pem<BR>sslproxy_options
NO_SSLv2,NO_SSLv3,SINGLE_DH_USE<BR>ssl_bump none localhost<BR>ssl_bump bump
all<BR>sslproxy_flags DONT_VERIFY_PEER<BR>sslproxy_cert_error allow
all</SPAN><SPAN
title="sslproxy_cert_error allow all
"><BR><BR></SPAN><SPAN
title="# El navegador dise que La conexión no es privada, NET::ERR_CERT_AUTHORITY_INVALID
">#
The browser designates that the connection is not private,
NET::ERR_CERT_AUTHORITY_INVALID<BR><BR></SPAN><SPAN
title="Es necesario que el cache_peer haya sido compilado con --enable-ssl-crtd y --with-openssl y estar configurado con ssl_bump para poder usar ssl_bump en mi servidor squid?">Is
it necessary for the cache_peer to be compiled with --enable-ssl-crtd and
--with-openssl and configured with ssl_bump to be able to use ssl_bump on my
<SPAN lang=en id=result_box><SPAN
title="Es necesario que el cache_peer haya sido compilado con --enable-ssl-crtd y --with-openssl y estar configurado con ssl_bump para poder usar ssl_bump en mi servidor squid hijo?">squid
child server</SPAN></SPAN>? </SPAN><SPAN
title="o existe el modo de configurar ssl_bump solo en el hijo, auque el padre no.
">Or
there is a way to configure ssl_bump on the child only, even if the parent does
not.<BR><BR></SPAN><SPAN title="Ayuda por favor.">Please
help.</SPAN></SPAN></BODY></HTML>