[squid-users] How to suppress SQUID_X509_V_ERR_DOMAIN_MISMATCH error for known domains?

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
BTW,

what is correct way to do this?

acl BrokenButTrustedServers dstdomain "/usr/local/squid/etc/dstdom.broken"
acl DomainMismatch ssl_error SQUID_X509_V_ERR_DOMAIN_MISMATCH
sslproxy_cert_error allow BrokenButTrustedServers DomainMismatch
sslproxy_cert_error deny all

?

26.03.16 23:25, Alex Rousskov пишет:
> On 03/26/2016 04:53 AM, Yuri Voinov wrote:
>> http://i.imgur.com/kxrOEVd.png
>>
>> How to suppress this? It stops WU right now.
>
>
> Does the ssl::certDomainMismatch ACL work to bypass the
> SQUID_X509_V_ERR_DOMAIN_MISMATCH error?
>
> If not, then just as a triage experiment (and not for production use!),
> does the following bypass the SQUID_X509_V_ERR_DOMAIN_MISMATCH error?
>
>   sslproxy_cert_error allow all
>
>
> Alex.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJW9tDXAAoJENNXIZxhPexGt2EH/04xNg6QGM1KjGelKc57MzbA
RlVWlqmcu/JtnpA+KEXjEKXTCCcpSdD0DYDouxvEpJyfv0RgontRbzilVnqIZtgo
lBJ5Yf26DDE7YU1vLdZofWr57ju1SaPLwxl84CQDWVAL60CN2o+lVh84XiXt84Ti
Biyq2eloeA4/w953C+P0howdU56YyUFw/48BhIlzpbV6j6WGlS0RDCwSD1hY229Z
ITgZS1S6cPt6fOwtVRLBovz7chvQJGWeDIICkBpWjafTMUX2OWU37Fv5LLA0Xrgb
mK+upQz2EauBqfsJOL+ju6yLCHQHzj3WwyKMtNjdEKkIVNlbUnzEstJJZR8I0mo=
=uQZX
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160327/cf400cfc/attachment.key>