Re: [squid-users] RPC over HTTPS

From: Gordon McKee <squidmlist@dont-contact.us>
Date: Thu, 20 Sep 2007 00:03:28 +0100

Hi

I have used the ca-bundle.crt file and a cafile= in the https_port section
and I still get the followng error:

2007/09/19 23:58:49| Detected DEAD Parent: opls
2007/09/19 23:58:49| SSL unknown certificate error 20 in /C=GB/ST=West
Midlands/L=Solihull/O=Optimal Profit Ltd/OU=StartCom Free Certificate
Member/OU=Domain validated
only/CN=www.opti***fit.com/emailAddress=****ckee.com
2007/09/19 23:58:49| fwdNegotiateSSL: Error negotiating SSL connection on FD
16: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed (1/-1/0)
2007/09/19 23:58:49| TCP connection to 192.168.0.11/443 failed

Sorry to be a pain - but the certificate file is an export of the on in iis
and the ca-bundle file is all the inter ca's and I appended the root ca at
the top for good measure and stil no luck? How can I get a certificate to
validate mine?

Many thanks

Gordon

----- Original Message -----
From: "Henrik Nordstrom" <henrik@henriknordstrom.net>
To: "Gordon McKee" <squidmlist@gdmckee.com>
Cc: <squid-users@squid-cache.org>
Sent: Wednesday, September 19, 2007 7:06 PM
Subject: Re: [squid-users] RPC over HTTPS
Received on Wed Sep 19 2007 - 17:03:52 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Oct 01 2007 - 12:00:02 MDT