RE: [squid-users] dynamic SSL cert generation

I was able to get it working in 3.1.12.1 as well.

-----Original Message-----
From: Will Metcalf [mailto:william.metcalf_at_gmail.com]
Sent: Tuesday, May 03, 2011 7:51 PM
To: Amos Jeffries
Cc: squid-users_at_squid-cache.org
Subject: Re: [squid-users] dynamic SSL cert generation

This daily build worked for me..

wget http://www.squid-cache.org/Versions/v3/3.HEAD/squid-3.HEAD-20110429.tar.gz

Regards,

Will

On Tue, May 3, 2011 at 5:55 PM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> On Tue, 3 May 2011 12:13:14 -0700, Mark Bassett wrote:
>>
>> http://wiki.squid-cache.org/Features/DynamicSslCert
>>
>> Which version of squid actually has this code in it?   I have tried
>> squid-3.1.12  and squid-3.2.0.7 (I was not able to get 3.2 to compile
>> cleanly)
>>
>> Squid-3.1.12 does not accept these parameters
>> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB, I get an
>> error about bungled squid.conf
>>
>> Ssl-bump is working just fine, but since the name of the cert doesn't
>> match the domain, we always get cert errors.  These can be bypassed in
>> the tools that we use by turning off certificate verification, but I'd
>> like to get this working with DynamicSSLCert.
>>
>> Thanks!
>
> 3.1.12.1 and 3.2.0.7. Slightly broken in both. Patches are winding their way
> slowly through QA in trunk as you noticed, when that is done being checked
> the release branches snapshots will have them.
>
> Amos
>
Received on Wed May 04 2011 - 18:45:55 MDT