[squid-dev] Bug 4305: Squid reports X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY...
Christos Tsantilas
christos at chtsanti.net
Sat Nov 28 08:35:59 UTC 2015
Hi all,
Sometimes the SSL servers does not send the full chain of
intermediate certificates, but instead send a link where the client can
download the intermediate certificates.
Currently squid can not handle such cases. Measurement Factory build a
patch which provides a workaround for this problem: Allow the users to
build a database of intermediate certificates, which can be used by
squid to complete certificate chains.
Measurement Factory currently works to implement a full solution for
this bug, a downloader for squid which will retrieve missing
certificates from the net.
However this solution may take some time to test and finish it.
Is it OK to apply to trunk the workaround patch in bug 4305?
Regards,
Christos
More information about the squid-dev
mailing list