[squid-dev] [PATCH] Add chained certificates and signing certificate to bumpAndSpliced connections

Nathan Hoad nathan at getoffmalawn.com
Thu Apr 30 05:11:55 UTC 2015


Hello,

I am running Squid with SSL bump in bump and splice mode, and I've
observed that this mode does not append the signing certificate or any
chained certificates to the certificate chain presented to the client.

With old bump mode, Squid adds the signing certificate and any other
chained certificates to the SSL context. With bump and splice mode,
these certificates are not added. Attached is a patch that adds these
certificates for bump and spliced connections.

Thank you,

Nathan.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bumpnsplice-chained-certificates-v1.patch
Type: text/x-diff
Size: 5288 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20150430/08051c75/attachment.patch>


More information about the squid-dev mailing list