LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 01-12-2015, 08:58 PM   #1
!! hack-back !!
Member
 
Registered: Nov 2009
Posts: 183

Rep: Reputation: 2
SSL Certs for Squid


oes anyone know how to configure an SSL cert with GoDaddy/digicert/comodo/? or any other CA trusted company.?
i generate the CSR and got the certificate from CA but when i put it in squid.conf with key like this way

https_port 3127 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/CA.pem key=/etc/squid/ssl_cert/testkey.pem

the command i used is

openssl req -newkey rsa:1024 -keyout testkey.pem -keyform PEM -out testreq.pem -outform PEM -nodes

but after i start squid and open any https site i got this error in firefox

Error code: sec_error_inadequate_key_usage
 
Old 01-14-2015, 01:22 PM   #2
pingu
Senior Member
 
Registered: Jul 2004
Location: Skuttunge SWEDEN
Distribution: Debian preferably
Posts: 1,350

Rep: Reputation: 127Reputation: 127
Is your certificate really named "CA.pem"? That is normally the name of the Certificate Authorities certificate, a cert that confirms your certificates authenticity.

Check carefully what you got from your certificate issuer.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Node JS -- Public SSL Certs gothrog Programming 2 06-26-2015 09:00 AM
SSL Certs on Squid citystriker Linux - Networking 2 01-11-2015 10:16 PM
Check all certs in ssl.conf Citadel Linux - Newbie 1 01-04-2013 10:27 AM
SSL certs watcher69b Linux - Security 2 03-28-2009 10:34 AM
The Big Name consipracy - and SSL certs jantman General 15 02-15-2007 02:43 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 01:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration