[squid-users] ECDSA and SSL bump

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Windows Updates is also incompatible with ECDSA due to akamai behind. :)

20.06.2016 17:19, Yuri Voinov пишет:
>
> akamaihd.net has compatibility issues with ECDSA squid's certs. fb.com
behind it, etc.
>
> 20.06.2016 0:10, Yuri Voinov пишет:
>
>
>       > ECDSA works with any combination with RSA in CA-subordinate
>       CA's.
>
>
>
>       > Will check compatibility issues, if any.
>
>
>
>       > 19.06.2016 17:40, Amos Jeffries пишет:
>
>       > > On 19/06/2016 10:17 p.m., Yuri
>
>       >       wrote:
>
>
>
>       >       >> Must be:
>
>
>
>       >       >>
>
>
>
>       >       >> openssl ecparam -name secp384r1 -genkey
>       -param_enc
>
>       >       named_curve -out
>
>
>
>       >       >> rootCA.key
>
>
>
>       >       >>
>
>
>
>       >       >> :)
>
>
>
>       >       >>
>
>
>
>       >       >> I.e. -param_enc can't be default, named_curve
>       argument
>
>       >       required :)
>
>
>
>       >       >>
>
>
>
>
>
>
>
>       >       > Aha.
>
>
>
>
>
>
>
>       >       > Is it working for you now? or do we still have to
>       alter the
>
>       >       cert
>
>
>
>       >       > generator part of Squid?
>
>
>
>
>
>
>
>       >       > Amos
>
>
>
>
>
>
>
>       >       > _______________________________________________
>
>
>
>       >       > squid-users mailing list
>
>
>
>       >       > squid-users at lists.squid-cache.org
>
>
>
>       >       > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXZ9PrAAoJENNXIZxhPexGUM0H/0Fwzs4XrryZ2LahnO4OZ2e7
DzWcXLtyNNkzOj3oKeOWvijjTuTH4F4nTIot5yiZqifngY1NHXbh1RkePYEy57YP
31lgJOBqm9pwHDMKdBwDRz28Ln03HzRimirrhNhJLEXRbdMXZHn4No+qXkfQHjI2
IoXcwM/ITVLgQ8cAW03SFLgUJwdVlbVjNq3vl0o0ZmJZ0MzYJ2/OlkuvNweNJXmQ
YTFWAUrNLXr9T0RYmWjoTH6JDHUQz83F6n7/ceuWkTwoRZ0hhlFzGCqCSHLD9V+B
P2C0d5a7ccBdNlJOMK3FQ1jOuuBTI999fX2HfQWy5Qtojm0V2y4izWrU5f+CQLg=
=VnZ2
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160620/c7d3fb62/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160620/c7d3fb62/attachment.key>