Hi
I am still having trouble with my certificate! Am I doing something
stupid?? Here is the openssl output to prove the cert paths
kursk# openssl verify -CAfile opl-all.pem -verbose opl20070919.pem
opl20070919.pem: OK
kursk#
here are the squid.conf line
https_port 82.36.186.17:443
cert=/usr/local/etc/squid/sslcert/opl20070919.pem ca
file=/usr/local/etc/squid/sslcert/opl-all.pem name=opls
defaultsite=www.optimalp
rofit.com
cache_peer 192.168.0.11 parent 443 0 no-query originserver login=PASS
nam
e=opls ssl sslcert=/usr/local/etc/squid/sslcert/opl20070919.pem
cache_peer_domain opls www.optimalprofit.com
I am still getting this error:
2007/09/21 12:24:41| SSL unknown certificate error 20 in /C=GB/ST=West
Midlands/L=Solihull/O=Optimal Profit Ltd/OU=StartCom Free Certificate
Member/OU=Domain validated
only/CN=www.optimalprofit.com/emailAddress=gordon@xxxxxxxxxxx
2007/09/21 12:24:41| fwdNegotiateSSL: Error negotiating SSL connection on FD
19: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed (1/-1/0)
2007/09/21 12:24:41| TCP connection to 192.168.0.11/443 failed
Does anyone know how to fix this? Do I need to post the certificates? Not
very secure though!!
Many thanks
Gordon
