On 09/26/2015 03:03 PM, Dieter Bloms wrote:
Hallo Marcus,
On Thu, Sep 17, Marcus Kool wrote:
I just tried accessing https://banking.postbank.de/
using Squid 3.5.8 and Chrome.
I also got the ERR_CONNECTION_CLOSED error.
thank you for testing, so I think the fault is not my config.
May it be a bug in squid or openssl, or maybe the webserver ?
The webserver has an error: it must supply the complete certificate chain but
it sends only one certificate.
Squid has correctly implemented the web standards and refuses to use the
incomplete certificate chain.
Most browsers fix the problem caused by web servers by downloading the missing
certificates.
This is not defined in a relevant standard but very handy.
As I described in my previous post, you can fix this webserver problem by the
appropriate ACL in squid.conf
and you may also send a complaint to the webmaster responsible for the faulty
webserver.
Marcus
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
