How to fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY Squid error

HTTPS filtering is a must for any network admin these days and if you implement HTTPS filtering using SSL Bumped Squid you have surely seen the famous (and not especially clear formulated) X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error.

The main reason for this error is very simple ā€“ one (or some) certificates presented by the remote HTTPS site you are browsing are not present in the certificate store on the host your Squid proxy runs on. And because of that Squid cannot generate mimicked SSL certificate required to perform HTTPS filtering.

Continue reading at https://docs.diladele.com/faq/squid/fix_unable_to_get_issuer_cert_locally.html

About sichent

sichent
This entry was posted in Linux. Bookmark the permalink.