[squid-users] How to suppress SQUID_X509_V_ERR_DOMAIN_MISMATCH error for known domains?

[Amos Jeffries]

On 26/03/2016 11:53 p.m., Yuri Voinov wrote:
> Look at this, gents.
> 
> http://i.imgur.com/kxrOEVd.png
> 
> How to suppress this? It stops WU right now.

That is TLS doing its job correctly. The entire purpose of HTTPS is to
prevent transactions like that one working.

 microsoft.com != akamai.com

The certificate being presented by the Akamai server is saying
explicitly that it is not valid for content about miscrosoft.com. A
different certificate is required for that access.

IME, content that is provided by Akamai is available through domains
with the CDN load balancing names (eg.
downloads.microsoft.com.m23.akamai.com) not the Akamai servers internal
names.

Amos