Re: [squid-users] tlsv1 alert unknown ca (1/0)

2018-04-26 Thread masterx81
Maybe i've spotted what was. Trendmicro Antivirus (cloud version). Was generating a lot of TCP_MISS with status code 200. Added the domain .trendmicro.com to the "not bumped" domains (with some microsoft domains used for the update processes) and the cache file is so much clean! -- Sent from

Re: [squid-users] tlsv1 alert unknown ca (1/0)

2018-04-26 Thread masterx81
How i can find what is the problematic CA? On the cache.log i have hundreds of this (aroung 10 per second), but in the access.log i have really few TCP_DENIED connections or in general other errors that can indicate what's causing that problem. Thanks!! -- Sent from: http://squid-web-proxy-cac

Re: [squid-users] tlsv1 alert unknown ca (1/0)

2018-04-26 Thread Amos Jeffries
On 26/04/18 20:40, masterx81 wrote: > > What i can try to do? You can try to find out what the CA is and work from there. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] tlsv1 alert unknown ca (1/0)

2018-04-26 Thread masterx81
Hi! I've enabled the ssl-bump with following directives: acl no_ssl_interception dstdomain .somedomain.com ssl_bump none localhost ssl_bump none no_ssl_interception ssl_bump stare ssl_bump bump all http_port 8080 ssl-bump cert=/etc/squid/ca.pem generate-host-certificates=on dynamic_cert_mem_cach