[squid-users] TCP FIN,ACK after ServerHelloDone with pcmag.com

[Amos Jeffries]

On 16/05/18 01:32, Marcus Kool wrote:
> pcmag.com also does not load here, although my config parameters are
> slightly different.
> The certificate is indeed huge...
> Do you have
>    ERROR: negotiating TLS on FD NNN: error:14090086:SSL
> routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0)
> or other errors in cache.log ?
> 
> Marcus
> 

Are these Squid-4.0.24 ? There is a regression[1] in the cafile=
parameter handling in the latest release.
 <https://bugs.squid-cache.org/show_bug.cgi?id=4831>

Amos