[squid-users] sslbump and google cert error

From: Ming Fu <fming_at_watchguard.com>
Date: Fri, 12 Mar 2010 10:51:31 -0500

I was using squid 3.1.0.16 icap + sslbump

The following log is from command
curl -x "10.1.19.16:3128" -k "https://www.google.com"

What is the error number 20 and 27 for?

2010/03/12 10:47:56.569| ClientHttpRequest::httpStart: NONE for
'https://www.google.com/'
2010/03/12 10:47:56.569| clientProcessRequest2: StoreEntry is NULL - MISS
2010/03/12 10:47:56.569| SSL unknown certificate error 20 in
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| bypassing SSL error 20 in
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| SSL unknown certificate error 27 in
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| bypassing SSL error 27 in
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| SSL Certificate signature OK:
/C=US/ST=California/L=Mountain View/O=Google Inc/CN=www.google.com
2010/03/12 10:47:56.812| Verifying server domain www.google.com to
certificate dn /C=US/ST=California/L=Mountain View/O=Google
Inc/CN=www.google.com
2010/03/12 10:47:56.812| Verifying server domain www.google.com to
certificate cn www.google.com
2010/03/12 10:47:56.953| Iterator.cc(171) updatePlan: no
service-proposed plan received

Thanks,
Ming

-- 
Ming Fu | Senior Developer
WatchGuard Technologies, Inc. | www.watchguard.com
(905)-804-1855 ext 229
fming_at_watchguard.com
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Get red. Get secured.
Received on Fri Mar 12 2010 - 15:56:06 MST

This archive was generated by hypermail 2.2.0 : Fri Mar 12 2010 - 12:00:03 MST