Re: [squid-users] Default CA file

2015-02-07 Thread Hector Chan
Yuri and Amos, thanks for the replies! There is an openssl command that tells where OpenSSL will search for CA certs. $ openssl version -d OPENSSLDIR: "/etc/pki/tls" On Sat, Feb 7, 2015 at 5:19 PM, Amos Jeffries wrote: > On 8/02/2015 9:28 a.m., Hector Chan wrote: > > Hi all, > > > > I have a

Re: [squid-users] Default CA file

2015-02-07 Thread Amos Jeffries
On 8/02/2015 9:28 a.m., Hector Chan wrote: > Hi all, > > I have a question about the CA file for SSL certificates. If I don't > specify anything for CA, what is default CA certs that squid will use for > the cache_peer ? The ones OpenSSL is configured to use. > > Here is a snippet of my config

Re: [squid-users] Default CA file

2015-02-07 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You need openssl CA's bundle. Which can be specify with capath= parameter. 08.02.2015 2:28, Hector Chan пишет: > Hi all, > > I have a question about the CA file for SSL certificates. If I don't specify anything for CA, what is default CA certs tha

[squid-users] Default CA file

2015-02-07 Thread Hector Chan
Hi all, I have a question about the CA file for SSL certificates. If I don't specify anything for CA, what is default CA certs that squid will use for the cache_peer ? Here is a snippet of my config file. https_port 127.0.0.1:4443 accel \ cert=/etc/certs/certificate \ key=/etc/certs/key