On Tue, 3 May 2011 12:13:14 -0700, Mark Bassett wrote:
> http://wiki.squid-cache.org/Features/DynamicSslCert
>
> Which version of squid actually has this code in it? I have tried
> squid-3.1.12 and squid-3.2.0.7 (I was not able to get 3.2 to compile
> cleanly)
>
> Squid-3.1.12 does not accept these parameters
> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB, I get
> an
> error about bungled squid.conf
>
> Ssl-bump is working just fine, but since the name of the cert doesn't
> match the domain, we always get cert errors. These can be bypassed
> in
> the tools that we use by turning off certificate verification, but
> I'd
> like to get this working with DynamicSSLCert.
>
> Thanks!
3.1.12.1 and 3.2.0.7. Slightly broken in both. Patches are winding
their way slowly through QA in trunk as you noticed, when that is done
being checked the release branches snapshots will have them.
Amos
Received on Tue May 03 2011 - 22:55:36 MDT
This archive was generated by hypermail 2.2.0 : Wed May 04 2011 - 12:00:02 MDT