[squid-dev] Bug 4305: Squid reports X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY...

Christos Tsantilas christos at chtsanti.net
Sat Nov 28 08:35:59 UTC 2015


Hi all,
   Sometimes the SSL servers does not send the full chain of 
intermediate certificates, but instead send a link where the client can 
download the intermediate certificates.

Currently squid can not handle such cases. Measurement Factory build a 
patch which provides a workaround for this problem: Allow the users to 
build a database of intermediate certificates, which can be used by 
squid to complete certificate chains.

Measurement Factory currently works to implement a full solution for 
this bug, a downloader for squid which will retrieve missing 
certificates from the net.
However this solution may take some time to test and finish it.

Is it OK to apply to trunk the workaround patch in bug 4305?

Regards,
    Christos


More information about the squid-dev mailing list