On 23/12/19 7:45 pm, GeorgeShen wrote: > > actually doing "openssl s_client -proxy 192.168.1.35:3129 -connect > <host:port> -showcerts ", > noticed two of the three certs from that display is from the proxy server I > think. the first one > is the modified host cert. maybe that's the way to get proxy server's certs. > You are using SSL-Bump. There is no "proxy cert" in these connections. There is only client cert (optional) and server cert (possibly modified by Squid, with CA chain). What you see there is what exists in the traffic. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
