[squid-users] Dynamic SSL

From: Hasanen AL-Bana <hasanen_at_gmail.com>
Date: Thu, 14 Mar 2013 15:22:53 +0300

Hi,

I have successfully installed squid 3.3 compiled with ssl support
Interception SSL traffic is working fine with browsers loaded with my
self created .DER file.
But without it , I keep getting browser warningings , chrome doesn't
work at all with gmail in this case.
My SSL settings are :

always_direct allow all
ssl_bump server-first all
sslproxy_cert_error allow all
https_port 3130 intercept generate-host-certificates=on
dynamic_cert_mem_cache_size=4MB
cert=/usr/local/squid/ssl_cert/myCA.pem ssl-bump

The question is , if I purchase a valid SSL certificate , will squid
be able to use it for all websites ?
Will user browsers accept it ?

Thanks,
Hasan
Received on Thu Mar 14 2013 - 12:23:21 MDT

This archive was generated by hypermail 2.2.0 : Thu Mar 14 2013 - 12:00:06 MDT