[squid-users] ECDSA and SSL bump

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
akamaihd.net has compatibility issues with ECDSA squid's certs. fb.com
behind it, etc.

20.06.2016 0:10, Yuri Voinov пишет:
>
> ECDSA works with any combination with RSA in CA-subordinate CA's.
>
> Will check compatibility issues, if any.
>
> 19.06.2016 17:40, Amos Jeffries пишет:
> > On 19/06/2016 10:17 p.m., Yuri
>       wrote:
>
>       >> Must be:
>
>       >>
>
>       >> openssl ecparam -name secp384r1 -genkey -param_enc
>       named_curve -out
>
>       >> rootCA.key
>
>       >>
>
>       >> :)
>
>       >>
>
>       >> I.e. -param_enc can't be default, named_curve argument
>       required :)
>
>       >>
>
>
>
>       > Aha.
>
>
>
>       > Is it working for you now? or do we still have to alter the
>       cert
>
>       > generator part of Squid?
>
>
>
>       > Amos
>
>
>
>       > _______________________________________________
>
>       > squid-users mailing list
>
>       > squid-users at lists.squid-cache.org
>
>       > http://lists.squid-cache.org/listinfo/squid-users
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXZ9FfAAoJENNXIZxhPexGFXEH/07BOBYDsUwvtm+fTw9nwaH4
XlB4smmYVK+f2xW+HN6IQolnF5ro6gWUkJTxwc6me/Hb2FkNFPWplvxo4ozmmLcz
D6sRAKf+EQoF4o7Zev1WRLu54mg0kIb5QbSYyr97u5exai2a7xPN8d9vZqhzFUox
5lmlIs07PKI4HsjGjYg1/C5kVJdc8znA6OUrmtgqnOwpCPkInz8mY9xqrrxMfjmT
bX0EMbxwSiofekcKjN0LB98jY4ZRyo4qjEawea1gjuWPdiuuK8jVXEWnybdb7igt
KqeR3/ikh/sb4Pxc/nohaSF34JDwkGKg4G8f7KPFTVi28FonsIDSaIwGNEeDClQ=
=1vWI
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160620/78837255/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160620/78837255/attachment-0001.key>