<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">Hey,<br>
<br>
How should that work? That would require an ca to sign your selfsigney ca to be able to issue valid public certs for all websites. If that would be possible, then the whole concept of ssl security would be worth nothing. You cant create valid certificates for such websites. You can only issue certs that are valid in your organisation only. Therefore the selfsigned ca needs to be trusted by your clients by adding it in the trust root authorities. There is no other way, wait, there is, do not try to intercept ssl secured connections. So you cant look in the traffic as it is supposed to be. Or break it and live with the needs required for this. If you have no valid reason to intercept sich traffic then just dont do it.<br><br><div class="gmail_quote">Am 5. September 2018 09:02:45 MESZ schrieb Arshad Ansari <arshadansari@live.in>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">Hi All,<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">I have setup squid 4.2 for forward proxy and caching. It is working fine when I am using self-signed certificate for SSL bump.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">However, our security requirement is to use only CA signed certificate and not self-signed certificate.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">I have tried various options like using Https and intercept but nothing seems to be working.<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">My question is does SSL work with CA signed certificate?<o:p></o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;"><o:p> </o:p></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); font-weight: normal; orphans: auto; widows: auto">
<span lang="EN-US" style="font-size: 11pt;">Regards,<br>
Arshad</span></p>
<br>
</div>
</blockquote></div></body></html>