Project

General

Profile

Actions
Copy link

Feature #10605

closed
VG VG

Add certificates from Trusted Store to Squid cert store

Feature #10605: Add certificates from Trusted Store to Squid cert store

Added by Viktor Gurov over 6 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
Squid
Target version:
-
Start date:
05/28/2020
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

PfSense 2.5 has the 'add to Trust Store' feature #4068, which allows you to add pfSense certificates to /etc/ssl/certs
It would be nice to add these certificates to the Squid /usr/local/share/certs certificate store:
https://github.com/pfsense/FreeBSD-ports/blob/ca039b812ec217cfad08f7812ac1dc4e3174a640/www/pfSense-pkg-squid/files/usr/local/pkg/squid.inc#L178

Related issues 1 (0 open — 1 closed)

Related to Bug #12738: Squid ignores CA Trust StoreResolved

Actions

VG Updated by Viktor Gurov over 6 years ago Actions
Copy link
 #1

  • Subject changed from Add certificates from Trusted Store to to Add certificates from Trusted Store to Squid cert store

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #2

"Extra Trusted CA" option to select the CA certificate that is used by the upstream SSL/MITM proxy:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/19

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #3

  • Status changed from New to Pull Request Review

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #4

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #5

  • Status changed from Feedback to New

works fine on 2.5, but produces php error on 2.4.5 if 'Extra Trusted CA' != none:

PHP Errors:
[08-Feb-2021 13:03:17 Europe/Moscow] PHP Fatal error:  Uncaught Error: Call to undefined function ca_setup_capath() in /usr/local/pkg/squid.inc:199
Stack trace:
#0 /usr/local/pkg/squid.inc(1236): squid_gen_extra_ca()
#1 /usr/local/pkg/squid.inc(2264): squid_resync_general()
#2 /usr/local/www/pkg_edit.php(243) : eval()'d code(1): squid_resync()
#3 /usr/local/www/pkg_edit.php(243): eval()
#4 {main}
  thrown in /usr/local/pkg/squid.inc on line 199

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #7

  • Status changed from New to Feedback

Merged

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #8

  • Status changed from Feedback to Resolved

squid pkg 0.4.45_3 - fixed

VG Updated by Viktor Gurov over 4 years ago Actions
Copy link
 #9

  • Related to Bug #12738: Squid ignores CA Trust Store added
Actions
Copy link

Also available in: Atom