<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>You can set up your own internal CA. You then have the CA key (so
can generate certificates for any domain) and install the CA
public certificate on all client machines.</p>
<p><br>
</p>
<p>That CA can be anything from a local CA on the squid box, using a
central VM with something like XCA installed, all the way to an
enterprise HSM.</p>
<p><br>
</p>
<p>But you must have the CA key. There is no way a commercial CA
would give you a universal signing key.</p>
<p><br>
</p>
<p>Alex<br>
</p>
<br>
<div class="moz-cite-prefix">On 05/09/18 08:02, Arshad Ansari wrote:<br>
</div>
<blockquote type="cite"
cite="mid:BN1PR12MB003539CBE68440F0D4F96067CE020@BN1PR12MB0035.namprd12.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
<div style="font-family: Calibri, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">Hi All,<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">I have setup squid
4.2 for forward proxy and caching. It is working fine when I
am using self-signed certificate for SSL bump.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">However, our
security requirement is to use only CA signed certificate
and not self-signed certificate.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">I have tried
various options like using Https and intercept but nothing
seems to be working.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">My question is
does SSL work with CA signed certificate?<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri,
sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal;
orphans: auto; widows: auto">
<span style="font-size: 11pt;" lang="EN-US">Regards,<br>
Arshad</span></p>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</body>
</html>