There is no way to automatically add ROOT CA into browsers or software.... If a software does that it's only based on a pre-defined rules. At my page: http://ngtech.co.il/static/myCA/autoinstaller/ There are three examples and one of them is for linux (Ubuntu,Debian,CentOS). You can see the right mime headers for the der(also cer) and pem formats. (use curl...) Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: eliezer@xxxxxxxxxxxx -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of FredB Sent: Wednesday, January 16, 2019 17:48 To: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Squid 4.5 and intermediate CA Hi Amos, Yes it works, and I guess I found where the problem is, this is a pkix-cert mime type and I wonder, but maybe I'm wrong, that Squid can't use the file openssl x509 -inform DER -in myfile shows the CA as text file, after that I can use the CA file with browser unable to download CA (wget for example) Perhaps this is a "bug" because pkix-cert is used by browsers (or clients software) to automatically adds CA https://www.iana.org/assignments/media-types/application/pkix-cert FredB _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
