https inspection using intermediate CA
Chakib Benziane <[email protected]> Sun, 7 Aug 2022 21:53:49 +0200
| Newsgroups | gmane.comp.web.privoxy.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, I am tring to use https inspection using a CA that is an intermediate not Root and the TLS handshake is failing between client and privoxy. I tracked down the problem to the generation of host certificates which sets the "Issuer" of the cert the same as the Issuer of the provided CA file. This works well when the provided CA the Root but in my case I want to use an Intermediate CA which is the only CA I deploy on my machines. Is there a reason why you are copying the Issuer field from the CA to the host certificate ? Why not set the Issuer of the generated certificate as the Subject of the CA file ? (see openssl.c L1984 - privoxy-3.0.33-stable) Regards, Chakib