Re: Requesting help to set up HTTPS inspection

--===============3043129167865830380==
Content-Type: multipart/signed; boundary="Sig_/WPdApY3T=01SWKGMS334W/q";
 protocol="application/pgp-signature"; micalg=pgp-sha256

--Sig_/WPdApY3T=01SWKGMS334W/q
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

allamistakeo21--- via Privoxy-users <[email protected]> wrote=
 on 2025-10-17 at 21:41:22:

>=20
> > Thank you for your advice. I activated the debug logging, which indeed =
revealed that the privoxy user didn=E2=80=99t have access rights to the CA =
files.=20
> > I changed the owner and group of the CA files, and now it works.=20
>=20
> Actually, I was a bit too fast to report success: it worked on one Mac, b=
ut on the other I am now getting a different error message, for instance wh=
en I attempt to visit google.com <http://google.com/>.=20
>=20
> The browser shows the following:=20
>=20
> Server certificate verification failed
>=20
> Privoxy <https://config.privoxy.org/> was unable to securely connect to t=
he destination server.
>=20
> Reason: unable to get local issuer certificate
>=20
>=20
> The log file shows the following:=20
>=20
>=20
> 2025-10-17 21:31:35.573 700009a07 Connect: to google.com
> 2025-10-17 21:31:35.637 700009a07 Connect: Connected to google.com[2a00:1=
450:400c:c1d::8a]:443.
> 2025-10-17 21:31:35.638 700009a07 Connect: Created new connection to goog=
le.com:443 on socket 11.
> 2025-10-17 21:31:35.640 700009a07 Connect: Performing the TLS/SSL handsha=
ke with the server
> 2025-10-17 21:31:35.673 700009a07 Error: X509 certificate verification fo=
r google.com failed: unable to get local issuer certificate
> 2025-10-17 21:31:35.675 700009a07 Crunch: Certificate error: unable to ge=
t local issuer certificate: https://google.com/

Did you specify a trusted-cas-file as documented at:
https://www.privoxy.org/user-manual/config.html#TRUSTED-CAS-FILE
?

Fabian

--Sig_/WPdApY3T=01SWKGMS334W/q
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEETzbBfzgWkTZUoehQaRgikYuiNxwFAmj/Q9AACgkQaRgikYui
Nxz/xhAAnncbVAwRx6gyrcTr65fTm+oAX3KKgt4+5v4/OdPHwjfHgYBws1SFlnPu
bBYTE7LCIyPwSIfVT4uKoQ31FtJsiGX1LNa4mwzbiE/NtGQ24yUEgTCl1HbESA3/
f6mY+RkAby7s0+hQDvwRcw/y8SgE08AjNzzh68SAJC374SrEFcuqlYid5sCtSx+K
wYkRbWTu5rXTSr0XxnRcLwitMaMVI0GRVsiD7qVLTacewGYCzwMu1IRl5bqEq6cL
wFzP+NSWlkEHLh/rIZYjkmJdQ7KRBKNHVUYToymyz7MGEiR6tvo9KAlf82ivSl/Z
MVsGqoYeWTuJIDfbxn4rWpbFXPKyxbi3qxH7NPb8+U1tFwq82O8nWk7bcvU8H98w
8C42rpyblTlmb/ip2DTmLQSSFHmjX41mfKNd3/f9jkyWiqQUY3x+UHXvy71CVgaJ
TpxahDqCVyPRxKQ8d7XzQkCnUfwy4BixAUhpd+7IoE2Gc6izeV/HUycmqm1RBBrC
AKlBXwSn1rp1e80PTlT7NVw8xF+gbI2FoEw2f4ZAYlSOeW1bGTArbE6X2abXp+KS
FQH/FUU3x6w4GkOWAlzAtPoAOE6cm0QgkOc+YdY+grZEXtYOBxrc/1ZuuGbDIidt
RgWYbV1KbpVf+eIp/r3puW/ECBoxOyxddDLGAF9ldV2j6qzLjiU=
=kNRr
-----END PGP SIGNATURE-----

--Sig_/WPdApY3T=01SWKGMS334W/q--

--===============3043129167865830380==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Privoxy-users mailing list
[email protected]
https://lists.privoxy.org/mailman/listinfo/privoxy-users

--===============3043129167865830380==--