On 01/24/2017 10:48 AM, Yuri Voinov wrote: > It seems 4.0.17 tries to download certs but gives deny somewhere. > However, same URL with wget via same proxy works > Why? Most likely, your http_access or similar rules deny internal download transactions but allow external ones. This is possible, for example, if your access rules use client information. Internal transactions (ESI, missing certificate fetching, Cache Digests, etc.) do not have an associated client. The standard denial troubleshooting procedure applies here: Start with finding out which directive/ACL denies access. I am _not_ implying that this is easy to do. HTH, Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users