configuring proxy stable12

manuj kumar — Sun, 19 Apr 2009 09:07:11 GMT

hello.

i am configuring squid Version 3.0.STABLE12 under Linux Ubuntu 8.04.2 system.
i am trying to make a secure proxy server so i will use OpenSSL 0.9.8k 25 Mar 2009 to generate the key and certificate using DSA key as follow.

root@proxy:# openssl dsaparam -rand -genkey -out dsaparam-file 2048
root@proxy:# openssl gendsa -des3 -out dsa.key dsaparam-file
root@proxy:# openssl req -new -x509 -days 1095 -key dsa.key -out mail.xxx.com.crt

now in squid.conf i will put.
---------------------------------
#http_port 3128

https_port 10.10.3.47:443 defaultsite=mail.xxx.com protocol=http cert=/cert/mail.burgan.com.crt key=/cert/dsa.key
---------------------------------

now this error happened when trying to https://serverip from the local network.
"Internet Explorer cannot display the webpage"

and in the server side

2009/04/19 12:56:20| clientNegotiateSSL: Error negotiating SSL connection on FD 11: error:1408A0C1:SSL routines:SSL3_GET_CLIE
NT_HELLO:no shared cipher (1/-1)
2009/04/19 12:56:20| clientNegotiateSSL: Error negotiating SSL connection on FD 11: error:1408A0C1:SSL routines:SSL3_GET_CLIE
NT_HELLO:no shared cipher (1/-1)
----------------------------------------------

please can anyone help?.

thanks

topic configuring proxy stable12 in Operating System - Linux

configuring proxy stable12