LINUX.ORG.RU

История изменений

Исправление Kuzz, (текущая версия) :

ertificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:6a:97:55:60:77:66:15:5d:fd:5b:f6:ca:6b:ee:02:f2:bf:54
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=UA, ST=Dn, L=Dnipropetrovsk, O=DRPBK, OU=Proxy, CN=___________/emailAddress=_______________
        Validity
            Not Before: Mar 11 16:27:34 2015 GMT
            Not After : Jun  9 00:00:00 2015 GMT
        Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=google.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
-----
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:google.com, DNS:*.2mdn.net, DNS:*.android.com, DNS:*.appengine.google.com, DNS:*.au.doubleclick.net, DNS:*.cc-dt.com, 
------
DNS:google.uz, DNS:google.vg, DNS:google.vu, DNS:google.ws, DNS:googlecommerce.com, DNS:gstatic.com, DNS:urchin.com, DNS:youtu.be, DNS:youtube.com, DNS:youtubeeducation.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha1WithRSAEncryption

CN=173.194.122.247

ssl_bump client-first all
ssl_bump server-first all

Оу. Отрабатывает первая директива, а нужна вторая. client-first для пробы убрать.

Исходная версия Kuzz, :

ertificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:6a:97:55:60:77:66:15:5d:fd:5b:f6:ca:6b:ee:02:f2:bf:54
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=UA, ST=Dn, L=Dnipropetrovsk, O=DRPBK, OU=Proxy, CN=___________/emailAddress=_______________
        Validity
            Not Before: Mar 11 16:27:34 2015 GMT
            Not After : Jun  9 00:00:00 2015 GMT
        Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=google.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
-----
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:google.com, DNS:*.2mdn.net, DNS:*.android.com, DNS:*.appengine.google.com, DNS:*.au.doubleclick.net, DNS:*.cc-dt.com, 
------
DNS:google.uz, DNS:google.vg, DNS:google.vu, DNS:google.ws, DNS:googlecommerce.com, DNS:gstatic.com, DNS:urchin.com, DNS:youtu.be, DNS:youtube.com, DNS:youtubeeducation.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha1WithRSAEncryption

CN=173.194.122.247

Директива ssl_bump server-first используется?