<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">You also stated .. " my current working theory suggests that we are looking at a (default) signUntrusted use case.”<div><br></div><div>I noticed for Squid documents that default is now set to off ..</div><div><br></div><div><pre style="padding: 15px;"><div style="caret-color: rgb(30, 30, 30); color: rgb(30, 30, 30); font-family: courier; font-size: 12px; display: block;"><div style="-webkit-user-select: all; -webkit-user-drag: element; display: inline-block;" class="apple-rich-link" draggable="true" role="link" data-url="http://www.squid-cache.org/Versions/v5/cfgman/http_port.html"><a style="border-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;display:block;-webkit-user-select:none;width:300px;user-select:none;-webkit-user-modify:read-only;user-modify:read-only;overflow:hidden;text-decoration:none;" class="lp-rich-link" rel="nofollow" href="http://www.squid-cache.org/Versions/v5/cfgman/http_port.html" dir="ltr" role="button" draggable="false" width="300"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:#E5E6E9;font-family:-apple-system, Helvetica, Arial, sans-serif;" class="lp-rich-link-emailBaseTable" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td vertical-align="center"><table bgcolor="#E5E6E9" cellpadding="0" cellspacing="0" width="300" style="font-family:-apple-system, Helvetica, Arial, sans-serif;table-layout:fixed;background-color:rgba(229, 230, 233, 1);" class="lp-rich-link-captionBar"><tbody><tr><td style="padding:8px 0px 8px 0px;" class="lp-rich-link-captionBar-textStackItem"><div style="max-width:100%;margin:0px 16px 0px 16px;overflow:hidden;" class="lp-rich-link-captionBar-textStack"><div style="word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-topCaption-leading"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v5/cfgman/http_port.html" style="text-decoration: none" draggable="false"><font color="#272727" style="color: rgba(0, 0, 0, 0.847059);">Squid 5.9 Configuration File: http_port</font></a></div><div style="word-wrap:break-word;font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-bottomCaption-leading"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v5/cfgman/http_port.html" style="text-decoration: none" draggable="false"><font color="#808080" style="color: rgba(0, 0, 0, 0.498039);">squid-cache.org</font></a></div></div></td><td style="padding:6px 12px 6px 0px;" class="lp-rich-link-captionBar-rightIconItem" width="36"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v5/cfgman/http_port.html" draggable="false"><img style="pointer-events:none !important;display:inline-block;width:36px;height:36px;border-radius:3px;" width="36" height="36" draggable="false" class="lp-rich-link-captionBar-rightIcon" alt="favicon.ico" src="cid:68CA058E-38AE-4BFF-9DED-C0315CF6EA38"></a></td></tr></tbody></table></td></tr></tbody></table></a></div></div><div style="caret-color: rgb(30, 30, 30); color: rgb(30, 30, 30); font-family: courier; font-size: 12px; display: block;"><br></div><div style="display: block;"><div style="caret-color: rgb(30, 30, 30); color: rgb(30, 30, 30); font-family: courier; font-size: 12px; display: block;"><div style="-webkit-user-select: all; -webkit-user-drag: element; display: inline-block;" class="apple-rich-link" draggable="true" role="link" data-url="http://www.squid-cache.org/Versions/v6/cfgman/http_port.html"><a style="border-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;display:block;-webkit-user-select:none;width:300px;user-select:none;-webkit-user-modify:read-only;user-modify:read-only;overflow:hidden;text-decoration:none;" class="lp-rich-link" rel="nofollow" href="http://www.squid-cache.org/Versions/v6/cfgman/http_port.html" dir="ltr" role="button" draggable="false" width="300"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:#E5E6E9;font-family:-apple-system, Helvetica, Arial, sans-serif;" class="lp-rich-link-emailBaseTable" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td vertical-align="center"><table bgcolor="#E5E6E9" cellpadding="0" cellspacing="0" width="300" style="font-family:-apple-system, Helvetica, Arial, sans-serif;table-layout:fixed;background-color:rgba(229, 230, 233, 1);" class="lp-rich-link-captionBar"><tbody><tr><td style="padding:8px 0px 8px 0px;" class="lp-rich-link-captionBar-textStackItem"><div style="max-width:100%;margin:0px 16px 0px 16px;overflow:hidden;" class="lp-rich-link-captionBar-textStack"><div style="word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-topCaption-leading"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v6/cfgman/http_port.html" style="text-decoration: none" draggable="false"><font color="#272727" style="color: rgba(0, 0, 0, 0.847059);">Squid 6.10 Configuration File: http_port</font></a></div><div style="word-wrap:break-word;font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-bottomCaption-leading"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v6/cfgman/http_port.html" style="text-decoration: none" draggable="false"><font color="#808080" style="color: rgba(0, 0, 0, 0.498039);">squid-cache.org</font></a></div></div></td><td style="padding:6px 12px 6px 0px;" class="lp-rich-link-captionBar-rightIconItem" width="36"><a rel="nofollow" href="http://www.squid-cache.org/Versions/v6/cfgman/http_port.html" draggable="false"><img style="pointer-events:none !important;display:inline-block;width:36px;height:36px;border-radius:3px;" width="36" height="36" draggable="false" class="lp-rich-link-captionBar-rightIcon" alt="favicon.ico" src="cid:5ADA95A0-FAFB-44F5-85FE-78814D6AAC40"></a></td></tr></tbody></table></td></tr></tbody></table></a></div></div><font color="#1e1e1e" face="courier"><span style="caret-color: rgb(30, 30, 30); font-size: 12px;"></span></font></div><font color="#1e1e1e" face="courier"><span style="caret-color: rgb(30, 30, 30); font-size: 12px;"></span></font></pre><pre style="font-family: courier; padding: 15px; caret-color: rgb(30, 30, 30); color: rgb(30, 30, 30); font-size: 12px;"> tls-default-ca[=off]
Whether to use the system Trusted CAs. Default is OFF.</pre><pre style="font-family: courier; padding: 15px; caret-color: rgb(30, 30, 30); color: rgb(30, 30, 30); font-size: 12px;">Would enabling this resolve the problem in Squid 6.6 for error. In theory if default is auto off and it is attempting to use one it would be untrusted automagically after migration</pre><div><br><blockquote type="cite"><div>On Jul 4, 2024, at 14:45, Alex Rousskov <rousskov@measurement-factory.com> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;"><span class="Apple-converted-space"> </span>my current working theory suggests that we are looking at a (default) signUntrusted use case.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"></div></blockquote></div><br></div></body></html>