tech.safesquid.com

Hello,
I generate SSL certificate from SafeSquid Self-service portal.
After that I download SSL certificate from HTTPS Inspection section from SafeSquid Web GUI and Import it into chrome browser. Then I access HTTPS websites from browser. It is showing an error

Your connection is not secured for HTTPS sites.

Hii ,
(Follow https://docs.safesquid.com/wiki/Setup_HTTPS_Inspection)
Root Cause of your problem listed below

1. HTTPS Inspection is not configured correctly.
2. Global section is not Enabled as TRUE.
3. Password Encryption may fails because of improper inputs of passphrase or both passphrases are not matched.


Case 1 : Check for SSL certificate was properly import inside browser or not.

Follow Link : Import your SSL certificate into Internet Explorer or Chrome browser
https://docs.safesquid.com/wiki/Importi ... _or_Chrome
Follow Link : Import your SSL certificate into Firefox browser
https://docs.safesquid.com/wiki/Importi ... to_Firefox

Case 2 : Check for SSL Certs/Cache (if you face issue like showing)

Some of the HTTPS websites are working without error but some of the HTTPS websites are not working.

Run below command:
tail -F /var/log/safesquid/native/safesquid.log

Native Logs

2018 03 17 10:15:38.084 [119] network: IP:192.168.0.10 fd:20 normal client disconnected after making 1 requests
2018 03 17 10:15:38.084 [119] warn: advice: [IP:192.168.0.10] process: transfer failed
2018 03 17 10:15:38.084 [119] error: ssl: ClientEncrypt: failed encryption :anonymous@192.168.0.10 for www.irctc.co.in:443
2018 03 17 10:15:38.083 [119] error: ssl: EncryptC:987 ssl_ctx:NULL
2018 03 17 10:15:38.083 [119] error: ssl: failed : reading key from /var/db/safesquid/ssl/certs/irctc.co.in/www.irctc.co.in

If you face above error you have to remove all the HTTPS websites which you access from path /var/db/safesquid/ssl

Run the below command and check for the file :

root@sabproxy: cd /var/db/safesquid/ssl
root@sabproxy:/var/db/safesquid/ssl#
root@sabproxy:/var/db/safesquid/ssl# ll
total 24
drwxrwxr-- 6 ssquid root 4096 Jul 28 17:06 ./
drwxrwxr-- 7 ssquid root 4096 Jul 28 17:06 ../
drwxrwxr-- 2 ssquid root 4096 Aug 10 13:34 badcerts/
drwxrwxr-- 29 ssquid root 4096 Sep 2 16:27 certs/
drwxrwxr-- 2 ssquid root 4096 Jul 28 17:06 goodcerts/
drwxrwxr-- 2 ssquid root 4096 Jul 28 17:06 serials/

root@sabproxy:/var/db/safesquid/ssl# cd certs/
root@sabproxy:/var/db/safesquid/ssl/certs#rm -rf *

Repeat above step for badcerts/ and access those websites from browser.

If you Removal old activation key and install new activation key and configure new SSL certificate you may face "Connection Is Not Secured For HTTPS Site" Issue.

Troubleshooting : Run below command

root@sabproxy: cd /var/db/safesquid/ssl
root@sabproxy:/var/db/safesquid/ssl#
root@sabproxy:/var/db/safesquid/ssl# ll
total 24
drwxrwxr-- 6 ssquid root 4096 Jul 28 17:06 ./
drwxrwxr-- 7 ssquid root 4096 Jul 28 17:06 ../
drwxrwxr-- 2 ssquid root 4096 Aug 10 13:34 badcerts/
drwxrwxr-- 29 ssquid root 4096 Sep 2 16:27 certs/
drwxrwxr-- 2 ssquid root 4096 Jul 28 17:06 goodcerts/
drwxrwxr-- 2 ssquid root 4096 Jul 28 17:06 serials/

root@sabproxy:/var/db/safesquid/ssl# cd certs/
root@sabproxy:/var/db/safesquid/ssl/certs#rm -rf *

Repeat above step for badcerts/ and goodcerts/ and access those websites from browser for verification.