Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-16 Thread eliezer
-users On Behalf Of Bruno de Paula Larini Sent: Tuesday, January 15, 2019 19:33 To: squid-us...@squid-cache.org Subject: Re: [squid-users] ssl bump, CA certificate renewal, how to? Em 15/01/2019 15:01, Dmitry Melekhov escreveu: > > 5 years, really, not very long period of time, if I'll b

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread Bruno de Paula Larini
Em 15/01/2019 15:01, Dmitry Melekhov escreveu: 5 years, really, not very long period of time, if I'll be sure to not work here in 5 years then I'll use this ;-) , unfortunately I'm not :-( I don't need to replace certificate every year or so, but I need to have minimal service interruption

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread FredB
Sorry wrong topic Le 15/01/2019 à 18:08, FredB a écrit : Now squid can get directly the intermediate CA as a browser does, it's a very interesting feature to me Maybe I'm missing something, but I can see the request from squid now (with squid 4) it's a good point, my sslbump config is very

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread FredB
Now squid can get directly the intermediate CA as a browser does, it's a very interesting feature to me Maybe I'm missing something, but I can see the request from squid now (with squid 4) it's a good point, my sslbump config is very basic, perhaps to basic cl step at_step SslBump1 ssl_bump

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread Dmitry Melekhov
ech.co.il> cid:image001.png@01D2675E.DCF360D0 *From:*squid-users *On Behalf Of *Dmitry Melekhov *Sent:* Tuesday, January 15, 2019 07:02 *To:* squid-us...@squid-cache.org *Subject:* [squid-users] ssl bump, CA certificate renewal, how to? Hello! According  to https://wiki.squid-cache.

Re: [squid-users] ssl bump, CA certificate renewal, how to?

2019-01-15 Thread eliezer
Mobile: +972-5-28704261 Email: <mailto:elie...@ngtech.co.il> elie...@ngtech.co.il From: squid-users On Behalf Of Dmitry Melekhov Sent: Tuesday, January 15, 2019 07:02 To: squid-us...@squid-cache.org Subject: [squid-users] ssl bump, CA certificate renewal, how to? Hello! Accordin

[squid-users] ssl bump, CA certificate renewal, how to?

2019-01-14 Thread Dmitry Melekhov
Hello! According  to https://wiki.squid-cache.org/Features/DynamicSslCert recommended way to create certificate openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -extensions v3_ca -keyout myCA.pem -out myCA.pem we can create certificate for longer time. But sooner or later