Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Matus UHLAR - fantomas
On 21.07.20 09:41, Dieter Bloms wrote: we use the sslbump feature and it works very well. But some sites can't be reached because of missing intermediate certificate. In squid.conf we have configured the following parameters: --snip-- # allow fetching of missing intermediate certificates acl fe

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Dieter Bloms
Hello Matus, thank you for your answer. On Tue, Jul 21, Matus UHLAR - fantomas wrote: > On 21.07.20 09:41, Dieter Bloms wrote: > > we use the sslbump feature and it works very well. > > But some sites can't be reached because of missing intermediate > > certificate. > > > > In squid.conf we hav

Re: [squid-users] squid doesn't fetch the intermediate certificate for some sites

2020-07-21 Thread Alex Rousskov
On 7/21/20 3:41 AM, Dieter Bloms wrote: > for some sites like https://mycase.cloudapps.cisco.com/ > squid doesn't fetch the intermediate certificate and returns > X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY The underlying problem is not specific to SslBump AFAICT. The combination of unfortunate