<!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body text="#26a269" bgcolor="#000000"> <div class="moz-cite-prefix">27.07.2026 07:54, Vacheslav пишет: </div> <blockquote type="cite" cite="mid:7c6a8ab5-6ca0-44ce-aec8-d31f8f793072@ckta.by"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <div class="moz-cite-prefix">24.07.2026 16:08, Alex Rousskov пишет: </div> <blockquote type="cite" cite="mid:6b09165f-a841-4762-a11c-6f49ba4053be@measurement-factory.com">On 2026-07-23 07:38, Vacheslav wrote: <blockquote type="cite"> 23.07.2026 12:53, Andrey K пишет: <blockquote type="cite">It seems that the logs from 2026/07/23 no longer show any security_file_certgen crashes, </blockquote> </blockquote> I also assume that sslcrtd_program helpers no longer exit. <blockquote type="cite"> <blockquote type="cite">but the browser errors are still there. Is it possible that the browsers are simply rejecting the new proxy certificate because it's not trusted? </blockquote> </blockquote> <blockquote type="cite">even though i imported the new certificate, the browser was using the old certificate with the same certificate name, so i reissued the new der certificate and imported it into firefox and now it visible as the new certificate but the websites are not opening as they display a mixed certificate between the site and the squid certificate. </blockquote> In a working setup, we expect: A) A browser receiving a site certificate generated by Squid. This site certificate (A) is signed by CA certificate (B). B) CA certificate in /etc/squid/certs/squid-ca-cert-key.pem Squid http_port configured to use certificate (B). Browser configured to trust certificate (B). How does the above differ from what you observe? Alex. </blockquote> i'm getting in firefox <a id="errorCode" data-l10n-id="fp-cert-error-code" data-l10n-name="error-code-link" data-telemetry-id="error_code_link" data-l10n-args="{"error": "SEC_ERROR_UNKNOWN_ISSUER"}" moz-do-not-send="true">Код ошибки: SEC_ERROR_UNKNOWN_ISSUER i had trusted squid-ca-cert.der in firefox and now i tried to trust squid-ca-cert-key.pem but it complained that it is already trusted.</a></blockquote> some sites are opening while others complain of <a id="errorCode" data-l10n-id="fp-cert-error-code" data-l10n-name="error-code-link" data-telemetry-id="error_code_link" data-l10n-args="{"error": "SEC_ERROR_UNKNOWN_ISSUER"}">SEC_ERROR_UNKNOWN_ISSUER like linkedin and hotmail</a> <blockquote type="cite" cite="mid:7c6a8ab5-6ca0-44ce-aec8-d31f8f793072@ckta.by"> <blockquote type="cite" cite="mid:6b09165f-a841-4762-a11c-6f49ba4053be@measurement-factory.com"> <blockquote type="cite">now the conf reconfigured is: http_port 8080 ssl-bump cert=/etc/squid/certs/squid-ca-cert-key.pem generate-host-certificates=on dynamic_cert_mem_cache_size=8MB </blockquote> </blockquote> <fieldset class="moz-mime-attachment-header"></fieldset> <pre wrap="" class="moz-quote-pre">_______________________________________________ squid-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a> <a class="moz-txt-link-freetext" href="https://lists.squid-cache.org/listinfo/squid-users">https://lists.squid-cache.org/listinfo/squid-users</a> </pre> </blockquote> </body> </html>