Re: [squid-users] WTF ? SSL Certficate error: certificate issuer (CA) not known

2016-06-22 Thread Amos Jeffries
On 23/06/2016 7:10 a.m., Yuri Voinov wrote:
> 
> Unknown intermediate certificate, that's all.
> 
> Dig to the direction sslproxy_foreign_intermediate_certs parameter.
> 

Maybe, or outdated ca-certificates info package. Every so often a big
updated happens and people find this happening.

AIUI, there is a push to remove SHA1 CA certs ongoing this year in the
global CA set.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] WTF ? SSL Certficate error: certificate issuer (CA) not known

2016-06-22 Thread Yuri Voinov

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
Unknown intermediate certificate, that's all.

Dig to the direction sslproxy_foreign_intermediate_certs parameter.


23.06.2016 1:07, sebastien.boulia...@cpu.ca пишет:
>
> Hu ?
>
> 
>
> My CA is known… Where is the issue ? :(
>
> The system returned:
>
> (71) Protocol error (TLS code:
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY)
>
> SSL Certficate error: certificate issuer (CA) not known:
/C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies,
Inc./OU=http://certs.starfieldtech.com/repository//CN=Starfield Secure
Certificate Authority - G2
>
> Sebastien
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXauKWAAoJENNXIZxhPexG9k8H/0mZ96kxDIcrdcYgPidsni09
2dncdG9kQi0mERqbtWYs75nmNVNTXHrMFIBHuzzgqQO3oCUrsCYkEpUi31j88Ll5
c86ldMNHa4YDFkuK1h9FjZzq1SQfES7M9HhTvVjeZKpRTx8WrZDyL4nE8OUD37eM
M9huaEl7UwrWuSVW4wy0OK8dopoDej+JzyBDWMVCz7h8wlLsprQMnWrZBbWt2WhT
2SM0ntO2ewPTMxeKIrqYRf9abDJrFlMdfNU9BjMZN6O2D5biM/lKt/nfcMjRDhlL
eWoSohM3xO2z8TqYUILNV4vd/6bWdApo97DI56Zi01fKi7ROiftom8OHNd16jNo=
=VHep
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] WTF ? SSL Certficate error: certificate issuer (CA) not known

2016-06-22 Thread Sebastien.Boulianne
Hu ?

My CA is known... Where is the issue ? :(
The system returned:
(71) Protocol error (TLS code: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY)
SSL Certficate error: certificate issuer (CA) not known: 
/C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, 
Inc./OU=http://certs.starfieldtech.com/repository//CN=Starfield Secure 
Certificate Authority - G2
Sebastien
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


[squid-users] wtf

2011-06-10 Thread MrNicholsB

squid is caching but refuses to serve cached content to my peers, its  =
a small home network and I need to get an estimate for, something that =
will likely take about an hour or two worth of work, to get my squid working
properly, its quite frustrating to see squids cache growing and 1gig memory
consumption, downloading http content like updates and game patches yet not
being served that cached content. its like a carrot dangling on a stick, and
I just apparently cant seem to get it. 



Re: [squid-users] wtf

2011-06-10 Thread Amos Jeffries

On 11/06/11 08:47, MrNicholsB wrote:

squid is caching but refuses to serve cached content to my peers, its =
a small home network and I need to get an estimate for, something that =
will likely take about an hour or two worth of work, to get my squid
working
properly, its quite frustrating to see squids cache growing and 1gig memory
consumption, downloading http content like updates and game patches yet not
being served that cached content. its like a carrot dangling on a stick,
and
I just apparently cant seem to get it.


Have you dropped hierarchy_stoplist from your config?
 Or are you using proxy-only in the peers configuration?

What does your complete config look like right now?

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.12
  Beta testers wanted for 3.2.0.8 and 3.1.12.2