08.09.2017 3:49, Yuri пишет: > > 08.09.2017 3:46, L A Walsh пишет: >> Yuri wrote: >>> Ooooops, >>> >>> miss end of message :) >>> >> --- >> I did search first! ;^) >> >> >> >>> Check all CA's chain. It is possible your root CA's bundle not complete. >>> >> --- >> Likely problem... >> >> >>> I usually use root CA's from Mozilla (added to squid.conf as one file) >>> and own self-supported intermediate CA's list (file). >>> >> ---- >> How often do they update? I.e. should I set up a cron job to download >> and concatenate the CA's? Is there a preferred D/L URL? > I added to cron once per month update. Script (specific to my setups) to > update and reconfigure squid. > I use this URL: > https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt > >> >> >> >> >>> But in addition I'm using Squid 5.x with working cert's downloader ;) >>> >> ---- >> :^/ --- hmmm.... and I'm not even running 4.x... *ouch*... 3.5.26 (last known) works with relatively complete intermediates and with some manually added root CA's. >> >> Is that going to be backported to 3.x? Isn't 4.x the beta/devel version, >> or is it 4.x=beta and 5.x=devel? AFAIK it's not planning to backport it to 3.x, can't say about current 4.x. A bit long time migrated to development 5.x. Due to required features. >> >> >> Tnx! >> -l >> >> >> >
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
