Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-27 Thread Amos Jeffries
On 28/06/18 05:55, Amit Pasari - XS INFOSOL Inc. USA wrote: > On 6/27/18 11:20 PM, Amit Pasari - XS INFOSOL Inc. USA wrote: >> Dear Walter , >> >> I use >> >> sslproxy_cert_sign_hash sha256 >> >> and use a SHA-256  certificate >> >> The result is still the same . >>   >> "NET::ERR_CERT_WEAK_SIGNATU

Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-27 Thread Amit Pasari - XS INFOSOL Inc. USA
On 6/27/18 11:20 PM, Amit Pasari - XS INFOSOL Inc. USA wrote: Dear Walter , I use sslproxy_cert_sign_hash sha256 and use a SHA-256 certificate The result is still the same . "NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM" Also one more thing , when i open yahoo.com with any of those certificates

Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-26 Thread Amit Pasari - XS INFOSOL Inc. USA
Let me try the below solution , but if thats the case it shouldn't work with other browsers as well , what i think is chrome is either not reading my cert or rejecting it . Unsure . Amit On 6/26/18 10:38 PM, Walter H. wrote: On 26.06.2018 19:03, Amit pasari wrote: Dear Walter I have tried

Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-26 Thread Walter H.
On 26.06.2018 19:03, Amit pasari wrote: Dear Walter I have tried with both SHA1 and SHA256 cert . Sent from my iPhone On Jun 26, 2018, at 9:43 PM, Walter H. > wrote: On 26.06.2018 17:22, Amit Pasari - XS INFOSOL Inc. USA wrote: I am using squid in transp

Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-26 Thread Amit pasari
Dear Walter I have tried with both SHA1 and SHA256 cert . Sent from my iPhone > On Jun 26, 2018, at 9:43 PM, Walter H. wrote: > >> On 26.06.2018 17:22, Amit Pasari - XS INFOSOL Inc. USA wrote: >> I am using squid in transparent mode . Everything working fine in Firefox >> and IE after i h

Re: [squid-users] Chrome 67 Issue with SSL Bump

2018-06-26 Thread Walter H.
On 26.06.2018 17:22, Amit Pasari - XS INFOSOL Inc. USA wrote: I am using squid in transparent mode . Everything working fine in Firefox and IE after i have imported the certificate in both the browser , but in Chrome 67 version on Windows 10 i am facing the below issue NET::ERR_CERT_WEAK_S

[squid-users] Chrome 67 Issue with SSL Bump

2018-06-26 Thread Amit Pasari - XS INFOSOL Inc. USA
Dear All, I am using squid ver.3.5.26 on centos 6.7 with below configuration . = http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/myssl/public.pem capath=/etc/ssl/certs options=NO_