From b020b2ca6f187f9ce097da677a435172cac711be Mon Sep 17 00:00:00 2001 From: Klas Arvidsson <klas.arvidsson@liu.se> Date: Tue, 27 Oct 2020 12:14:01 +0100 Subject: [PATCH] new proxy certificate --- files/squid/squid.conf | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/files/squid/squid.conf b/files/squid/squid.conf index f2a0f5a..7d7c17d 100644 --- a/files/squid/squid.conf +++ b/files/squid/squid.conf @@ -29,7 +29,13 @@ # to let curl know about the new CA (needed for RStudio HTTPS # downloads, the module for RStudio will set CURL_CA_BUNDLE # environment variable.) -# 4. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/* +# 4. +# nytt cert i ~/certificate/.. +# certutil -d sql:./.pki/nssdb -A -t 'CT,c,c' -n "exam.ida.liu.se - Linkoping university" -i myCA.der +# certutil -d sql:./.pki/nssdb -D -n "exam.ida.liu.se - Linkoping university" +# certutil -d sql:./.pki/nssdb -L + +# OLD. Change in exam environment, (after added in Chromium myCA.der end up "somewhere" in ~/.pki/* # Use this command to edit chrome exam template settings: # env -i XAUTHORITY=/home/examadm/.Xauthority DISPLAY=$DISPLAY HOME=/home/examadm/Version-3.1/sea/env/courses/template_student_home_files/owned_by_uid chromium-browser --proxy-server="exam.ida.liu.se:3128" --temp-profile @@ -115,7 +121,7 @@ http_access deny all # Squid normally listens to port 3128 # http_port 3128 -http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct19-Oct20/myCA.pem +http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/ssl/certs/squid/Oct20-Oct21/myCA.pem always_direct allow all ssl_bump server-first all -- GitLab