new proxy certificate

files/squid/squid.conf

@@ -29,7 +29,13 @@
 #    to let curl know about the new CA (needed for RStudio HTTPS
 #    downloads, the module for RStudio will set CURL_CA_BUNDLE
 #    environment variable.)
-# 4. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/*
+# 4.
+# nytt cert i ~/certificate/..
+# certutil -d sql:./.pki/nssdb -A -t 'CT,c,c' -n "exam.ida.liu.se - Linkoping university" -i myCA.der 
+# certutil -d sql:./.pki/nssdb -D -n "exam.ida.liu.se - Linkoping university"
+# certutil -d sql:./.pki/nssdb -L
+
+# OLD. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/*
 #    Use this command to edit chrome exam template settings:
 #  env -i XAUTHORITY=/home/examadm/.Xauthority DISPLAY=$DISPLAY HOME=/home/examadm/Version-3.1/sea/env/courses/template_student_home_files/owned_by_uid chromium-browser --proxy-server="exam.ida.liu.se:3128" --temp-profile
 
@@ -115,7 +121,7 @@ http_access deny all
 
 # Squid normally listens to port 3128
 # http_port 3128
-http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct19-Oct20/myCA.pem
+http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct20-Oct21/myCA.pem
 always_direct allow all
 ssl_bump server-first all