Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 01-12-2015, 08:58 PM   #1
!! hack-back !!
Registered: Nov 2009
Posts: 183

Rep: Reputation: 2
SSL Certs for Squid

oes anyone know how to configure an SSL cert with GoDaddy/digicert/comodo/? or any other CA trusted company.?
i generate the CSR and got the certificate from CA but when i put it in squid.conf with key like this way

https_port 3127 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/CA.pem key=/etc/squid/ssl_cert/testkey.pem

the command i used is

openssl req -newkey rsa:1024 -keyout testkey.pem -keyform PEM -out testreq.pem -outform PEM -nodes

but after i start squid and open any https site i got this error in firefox

Error code: sec_error_inadequate_key_usage
Old 01-14-2015, 01:22 PM   #2
Senior Member
Registered: Jul 2004
Location: Skuttunge SWEDEN
Distribution: Debian preferably
Posts: 1,350

Rep: Reputation: 127Reputation: 127
Is your certificate really named "CA.pem"? That is normally the name of the Certificate Authorities certificate, a cert that confirms your certificates authenticity.

Check carefully what you got from your certificate issuer.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Node JS -- Public SSL Certs gothrog Programming 2 06-26-2015 09:00 AM
SSL Certs on Squid citystriker Linux - Networking 2 01-11-2015 10:16 PM
Check all certs in ssl.conf Citadel Linux - Newbie 1 01-04-2013 10:27 AM
SSL certs watcher69b Linux - Security 2 03-28-2009 10:34 AM
The Big Name consipracy - and SSL certs jantman General 15 02-15-2007 02:43 PM > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 12:21 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration