[squid-users] Help with Certificate validation

[Amos Jeffries]

On 18/01/2017 8:31 a.m., Yuri Voinov wrote:
> Put your regression server to SSL Bump splice rule.
> 

If the situation requires SSL-Bump at all then there is no good
solution, because the browser itself is doing CRL checks and rejection.
Squid cannot change browsers internal coding.

> 
> 18.01.2017 1:27, Mustafa Mohammad пишет:
>> I’m using squid proxy to connect to our regression server. When our
>> configuration file is doing a CRLCheck, I’m unable to connect to the
>> server.  I have tried SSL bump and ssl_proxy option but was unable to
>> make it work. When I checked the logs, It says it was unable to
>> validate certificate. This is a high priority issue for our company.
>> Please respond as soon as possible.
>>

How are browser(s) getting to the proxy?

Amos