diff --git a/files/squid/squid.conf b/files/squid/squid.conf index f2a0f5ab331a0d29739264347e0dbcc7ecacbc52..7d7c17d558e2ec1bd8d45cc7c22f5a71121287e2 100644 --- a/files/squid/squid.conf +++ b/files/squid/squid.conf @@ -29,7 +29,13 @@ # to let curl know about the new CA (needed for RStudio HTTPS # downloads, the module for RStudio will set CURL_CA_BUNDLE # environment variable.) -# 4. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/* +# 4. +# nytt cert i ~/certificate/.. +# certutil -d sql:./.pki/nssdb -A -t 'CT,c,c' -n "exam.ida.liu.se - Linkoping university" -i myCA.der +# certutil -d sql:./.pki/nssdb -D -n "exam.ida.liu.se - Linkoping university" +# certutil -d sql:./.pki/nssdb -L + +# OLD. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/* # Use this command to edit chrome exam template settings: # env -i XAUTHORITY=/home/examadm/.Xauthority DISPLAY=$DISPLAY HOME=/home/examadm/Version-3.1/sea/env/courses/template_student_home_files/owned_by_uid chromium-browser --proxy-server="exam.ida.liu.se:3128" --temp-profile @@ -115,7 +121,7 @@ http_access deny all # Squid normally listens to port 3128 # http_port 3128 -http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct19-Oct20/myCA.pem +http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct20-Oct21/myCA.pem always_direct allow all ssl_bump server-first all