On Tue, 2 Mar 2004, Rakesh Kumar wrote:

> On linux server (RedHat 9.0) I have installed Squid V3.0 and Openssl
> V0.9.7c.
> for using this as HTTPS accelerator for our exchange server.
>
> So far I have done follwoing:
>
> 1. Generated a RSA key with followinf command:
> openssl genrsa -des3 -out privkey.pem 2048
>
> 2. Created a self-signed certificate-
> openssl req -new -x509 -nodes -key privkey.pem -out cacert.pem -days 100
>
> 3. The squid.conf has follwoing line -
> https_port 443 cert=/usr/local/ssl/privkey.pem


privkey is the key, not the certificate. You need both.

Regards
Henrik