[squid-users] dynamic SSL cert generation

From: Mark Bassett <mbassett_at_intelius.com>
Date: Tue, 3 May 2011 12:13:14 -0700

http://wiki.squid-cache.org/Features/DynamicSslCert

Which version of squid actually has this code in it? I have tried
squid-3.1.12 and squid-3.2.0.7 (I was not able to get 3.2 to compile
cleanly)

Squid-3.1.12 does not accept these parameters
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB, I get an
error about bungled squid.conf

Ssl-bump is working just fine, but since the name of the cert doesn't
match the domain, we always get cert errors. These can be bypassed in
the tools that we use by turning off certificate verification, but I'd
like to get this working with DynamicSSLCert.

Thanks!
Received on Tue May 03 2011 - 19:13:50 MDT

This archive was generated by hypermail 2.2.0 : Wed May 04 2011 - 12:00:02 MDT