Solved! I needed to point the cafile option to the the new VeriSign cert .. Bert. "Bert Moorthaemer" <bert.moorthaemer@xxxxxxxxxx> wrote in message news:eit0f2$ktu$1@xxxxxxxxxxxxxxxx > Hi! > > I think I know what is happening with my server certificate ... I need > certificate chaining to be able to update the VeriSign certificate in my > browser ... I this possible with Squid26STABLE4 ?? > > TIA > > Bert. > > "Bert Moorthaemer" <bert.moorthaemer@xxxxxxxxxx> wrote in message > news:eisb0p$12g$1@xxxxxxxxxxxxxxxx >> Hi all! >> >> I have the following config for Squid2.6STABLE4: >> >> https_port webmail:443 >> cert=/usr/local/etc/squid/certs/webmail.foo.com.pem >> defaultsite=webmail.foo.com protocol=http vhost >> >> cache_peer x.x.x.x parent 80 0 no-query originserver front-end-https >> proxy-only >> cache_peer_domain x.x.x.x webmail.foo.com >> >> acl Websites type accelerated >> acl Website_domains dstdomain webmail.foo.com >> >> http_access allow Websites Website_domains >> http_access deny Websites >> >> The problem is that is can't authenticate with my Exchange Server. When I >> get the login dialog from my Exchange Server and enter the *right* >> credentials I get an access denied after 3 tries. Do I have a config >> problem here??? >> >> Next to this I also get a certificate error in my browser claiming that >> the cerfiticate could not be verified properly. I have a valid VeriSign >> signed certificate for this website .... can this be a problem of IE 7?? >> >> TIA >> >> Bert. >> >> >> > > > >