[squid-dev] [PATCH] Add chained certificates and signing certificate to bumpAndSpliced connections

Amos Jeffries squid3 at treenet.co.nz
Fri May 22 05:44:14 UTC 2015


On 30/04/2015 5:11 p.m., Nathan Hoad wrote:
> Hello,
> 
> I am running Squid with SSL bump in bump and splice mode, and I've
> observed that this mode does not append the signing certificate or any
> chained certificates to the certificate chain presented to the client.
> 
> With old bump mode, Squid adds the signing certificate and any other
> chained certificates to the SSL context. With bump and splice mode,
> these certificates are not added. Attached is a patch that adds these
> certificates for bump and spliced connections.
> 
> Thank you,
> 
> Nathan.
> 

Absent any objections I will apply this in a few days.

Christos: I would appreciate your input if possible.

Amos



More information about the squid-dev mailing list