Skip to main content
Information Security

Return to Question

Fixed grammar. Broke wall of text into paragraphs, to make it easier to parse. Made title more specific.
Source Link
S.L. Barth is on codidact.com
S.L. Barth is on codidact.com
  • 5.5k
  • 8
  • 41
  • 47

squid ssl bump Squid SSL Bump . why we need- getting "unknown issuer" despite having certificate authority. how things happen, do I need CA?

iI am using pfsensepfSense on the gateway of my network. iI configured squidSquid and enabled the httpsHTTPS filtering. iI created the internal caCA and configured squidSquid to use this internal caCA for ssl bumpSSL Bump. 

Now the problem is when iI try to access any site, this shows a warning message that this the certificate is not from a valid issuer sec_error_unknown_issuer, "sec_error_unknown_issuer". Moreover most browsers implement the https strictHTTPS Strict (hstsHSTS) so they wontwon't let the sites open with the non trusted-trusted certificate. i

I purchased a server certificate and added this to the caCA, but then squidSquid will not even start. what

What should iI do.? Do iI need to add the root certificate of the certifying authority, or i can notI cannot bypass this warning message. forFor the sslSSL bumping all the squid needSquid needs to do is to behave as a server to the client and as a client to the server. if
If it generates a certificatecertificate for a particular website on go then it is logically not possible. my

My question is how to bypass this warning message on the client machine. iI tried adding the certificates to the firefoxFirefox lists but this does not help due to hstsHSTS.

squid ssl bump . why we need certificate authority. how things happen

i am using pfsense on the gateway of my network. i configured squid and enabled the https filtering. i created the internal ca and configured squid to use this internal ca for ssl bump. Now the problem is when i try to access any site, this shows a warning message that this the certificate is not from valid issuer sec_error_unknown_issuer. Moreover most browsers implement the https strict (hsts) so they wont let the sites open with the non trusted certificate. i purchased a server certificate and added this to the ca but then squid will not even start. what should i do. Do i need to add root certificate of certifying authority or i can not bypass this warning message. for the ssl bumping all the squid need to do is to behave as a server to the client and as a client to the server. if it generates a certificate for a particular website on go then it is logically not possible. my question is how to bypass this warning message on the client machine. i tried adding the certificates to the firefox lists but this does not help due to hsts.

Squid SSL Bump - getting "unknown issuer" despite having certificate, do I need CA?

I am using pfSense on the gateway of my network. I configured Squid and enabled the HTTPS filtering. I created the internal CA and configured Squid to use this internal CA for SSL Bump. 

Now the problem is when I try to access any site, this shows a warning message that the certificate is not from a valid issuer, "sec_error_unknown_issuer". Moreover most browsers implement the HTTPS Strict (HSTS) so they won't let the sites open with the non-trusted certificate.

I purchased a server certificate and added this to the CA, but then Squid will not even start.

What should I do? Do I need to add the root certificate of the certifying authority, or I cannot bypass this warning message. For the SSL bumping all Squid needs to do is to behave as a server to the client and as a client to the server.
If it generates a certificate for a particular website on go then it is logically not possible.

My question is how to bypass this warning message on the client machine. I tried adding the certificates to the Firefox lists but this does not help due to HSTS.

Source Link
shiv garg
shiv garg
  • 133
  • 1
  • 5

squid ssl bump . why we need certificate authority. how things happen

i am using pfsense on the gateway of my network. i configured squid and enabled the https filtering. i created the internal ca and configured squid to use this internal ca for ssl bump. Now the problem is when i try to access any site, this shows a warning message that this the certificate is not from valid issuer sec_error_unknown_issuer. Moreover most browsers implement the https strict (hsts) so they wont let the sites open with the non trusted certificate. i purchased a server certificate and added this to the ca but then squid will not even start. what should i do. Do i need to add root certificate of certifying authority or i can not bypass this warning message. for the ssl bumping all the squid need to do is to behave as a server to the client and as a client to the server. if it generates a certificate for a particular website on go then it is logically not possible. my question is how to bypass this warning message on the client machine. i tried adding the certificates to the firefox lists but this does not help due to hsts.