Re: [squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-22 Thread Amos Jeffries
On 22/06/17 21:23, Nikita wrote: 2017-06-21 19:46 GMT+03:00 Alex Rousskov: On 06/21/2017 10:15 AM, Nikita wrote: > Is it possible to allow self-signed SSL certificates for ICAP server > connections somehow? Can you configure your OpenSSL library (or equivalent) to trust the IC

Re: [squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-22 Thread Nikita
2017-06-21 19:46 GMT+03:00 Alex Rousskov : > On 06/21/2017 10:15 AM, Nikita wrote: > > > Is it possible to allow self-signed SSL certificates for ICAP server > > connections somehow? > > Can you configure your OpenSSL library (or equivalent) to trust the ICAP > server certificate? Squid deletages

Re: [squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-21 Thread Alex Rousskov
On 06/21/2017 10:15 AM, Nikita wrote: > Is it possible to allow self-signed SSL certificates for ICAP server > connections somehow? Can you configure your OpenSSL library (or equivalent) to trust the ICAP server certificate? Squid deletages most of the certificate validation work to OpenSSL (or e

[squid-users] Squid reject self-signed SSL certificate of ICAP server

2017-06-21 Thread Nikita
Hello, I'm trying to integrate Squid with secure ICAP server over icaps:// protocol for two-way authentication (icap_service configuration directive). I find out that Squid reject self-signed certificate of ICAP server and there is no obvious workaround. There is tls-flags=DONT_VERIFY_PEER flag,