4 ms·
Yes, I'll be setting that up soon. But if the cert is truly bad from the website, there doesn't seem to really be an easy way to check it since squid either out
by esaym 11y ago
Yes, I'll be setting that up soon. But if the cert is truly bad from the website, there doesn't seem to really be an easy way to check it since squid either outright accepts it or just rejects it depending on the config.
- kijin 11y agoIf Squid can't proxy sites with bad certs in a reasonable way, that's Squid's problem, not a problem with HTTPS. The fact that some open-source software can't do what you want it to do doesn't mean that there's anything wrong with other people trying to be secure. The most obvious solution would be to fix Squid, pay someone to fix it if you can't, or at the very least write a bug report to let other people know that you need it fixed.
- phaemon 11y agoIt appears Squid can do this. See: http://wiki.squid-cache.org/Features/MimicSslServerCert http://wiki.squid-cache.org/Features/MimicSslServerCert