[squid-users] RE: squid-users Digest 11 Feb 2011 21:14:30 -0000 Issue 3732

From: John Gardner <John.Gardner_at_southtyneside.gov.uk>
Date: Mon, 14 Feb 2011 07:53:09 +0000

>It does not matter where the files are generated. As long as they are
>stored on the Squid box for Squid to access.
>
>For Squid you do not have to install anything into OpenSSL, which is
>just a library.

Thanks for the pointers Amos.

Hopefully I'm going to attempt to do it this way;

1) Export the file from the Windows server as a .pfx file
2) Separate the private key from the .pfx file;
        openssl pkcs12 -in windows.pfx -out outputfile.txt -nodes
3) Extract the private key from outputfile.txt and store it as private.key
4) Then add the line to Squid;
        https_port 443 cert=/usr/newrprgate/CertAuth/verisign.cert key=/usr/newrprgate/CertAuth/private.key defaultsite=mywebsite.mydomain.com vhost

Where;
private.key = the original private key of the Windows server that generated the original request
verisign.cert = the wildcard certificate back from Verisign

Can anybdy see any immediate faults with doing it this way?

Thanks

John

This email and any files transmitted with it are intended solely for the named recipient and may contain sensitive, confidential or protectively marked material up to the central government classification of ?RESTRICTED" which must be handled accordingly. If you have received this e-mail in error, please immediately notify the sender by e-mail and delete from your system, unless you are the named recipient (or authorised to receive it for the recipient) you are not permitted to copy, use, store, publish, disseminate or disclose it to anyone else.

E-mail transmission cannot be guaranteed to be secure or error-free as it could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses and therefore the Council accept no liability for any such errors or omissions.

Unless explicitly stated otherwise views or opinions expressed in this email are solely those of the author and do not necessarily represent those of the Council and are not intended to be legally binding.

 

All Council network traffic and GCSX traffic may be subject to recording and/or monitoring in accordance with relevant legislation.

South Tyneside Council, Town Hall & Civic Offices, Westoe Road, South Shields, Tyne & Wear, NE33 2RL, Tel: 0191 427 1717, Website: www.southtyneside.info
Received on Mon Feb 14 2011 - 07:54:20 MST

This archive was generated by hypermail 2.2.0 : Mon Feb 14 2011 - 12:00:01 MST