On Tue, 3 May 2011 12:13:14 -0700, Mark Bassett wrote:
http://wiki.squid-cache.org/Features/DynamicSslCert

Which version of squid actually has this code in it?   I have tried
squid-3.1.12  and squid-3.2.0.7 (I was not able to get 3.2 to compile
cleanly)

Squid-3.1.12 does not accept these parameters
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB, I get an
error about bungled squid.conf

Ssl-bump is working just fine, but since the name of the cert doesn't
match the domain, we always get cert errors. These can be bypassed in the tools that we use by turning off certificate verification, but I'd
like to get this working with DynamicSSLCert.

Thanks!

3.1.12.1 and 3.2.0.7. Slightly broken in both. Patches are winding their way slowly through QA in trunk as you noticed, when that is done being checked the release branches snapshots will have them.

Amos

Reply via email to