Re: [squid-users] error in using squid 2.5 ssl patch

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 17 Dec 2002 20:08:07 +0100

alp wrote:

> i am using squid 2.5S1 as ssl-gateway and everything works fine.
> then i tried to use the ssl patch: i took the latest 2.5 squid version
> and applied the patch without any errors; then i compiled the patched
> version again to use it as a ssl gateway (--with-openssl, --enable-ssl).
> if i start squid then,
> cache_log shows no errors but if i try to get a https site, the
> following error occurs:
> https Accept: error allocating handle:error 1403D0C3: ssl routines:
> ssl_new: null ssl ctr

I have seen an error like this when Squid could nor read the SSL
certificate or key. The SSL update patch has now been updated to more
clearly report such errors.

> in addition: if i use client certificates: there can be given a file for =
> accepted CAs. what is the syntax for this file? if CA "my_ca" has signed =
> the client certificate, should then the name "my_ca" be inserted into =
> this file in order to accept the client certificate?

This file should contain a list of CA certificates you accept, one after
the other. (note: only certificates, no private keys).

Regards
Henrik
Received on Tue Dec 17 2002 - 14:42:31 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:07 MST