[squid-users] Howto fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

[Yuri Voinov]

;-)

No problem, Raf. This is really much better solution ;-)

07.04.2017 22:44, Rafael Akchurin пишет:
> Hello Yuri,
>
> Yes this is much better solution!
>
> Best regards,
> Rafael Akchurin
>
> Op 7 apr. 2017 om 18:20 heeft Yuri Voinov <yvoinov at gmail.com
> <mailto:yvoinov at gmail.com>> het volgende geschreven:
>
>> #  TAG: sslproxy_foreign_intermediate_certs
>> #    Many origin servers fail to send their full server certificate
>> #    chain for verification, assuming the client already has or can
>> #    easily locate any missing intermediate certificates.
>> #
>> #    Squid uses the certificates from the specified file to fill in
>> #    these missing chains when trying to validate origin server
>> #    certificate chains.
>> #
>> #    The file is expected to contain zero or more PEM-encoded
>> #    intermediate certificates. These certificates are not treated
>> #    as trusted root certificates, and any self-signed certificate in
>> #    this file will be ignored.
>> #Default:
>> # none
>>
>> Heh?
>>
>>
>> 07.04.2017 15:13, Rafael Akchurin пишет:
>>>
>>> Hello everyone,
>>>
>>> Added new article for intermediate certificates and
>>> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error when bumping SSL.
>>> Hopefully will be helpful/interesting for someone
>>> https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html
>>>
>>>  
>>>
>>> Best regards,
>>> Rafael Akchurin
>>>
>>> Diladele B.V.
>>>
>>>
>>>
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> http://lists.squid-cache.org/listinfo/squid-users
>>
>> -- 
>> Bugs to the Future
>> <0x613DEC46.asc>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> <mailto:squid-users at lists.squid-cache.org>
>> http://lists.squid-cache.org/listinfo/squid-users

-- 
Bugs to the Future
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170407/d029dc11/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170407/d029dc11/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170407/d029dc11/attachment-0001.sig>