[squid-users] SSL and reverse proxy

hi,

in the paste our webserver runs with a signed certifacte (i think by
verisign, i dont know):

internet <=> checkpoint <=> webserver

apache.conf:
[..]
 SSLEnable
 SSLCACertificateFile /www/crt/ca-bundle.dat
 SSLCertificateFile /www/crt/www_domain.de.crt
 SSLCertificateKeyFile /www/crt/server.key
[..]

after installing a reverse proxy (squid2.5STABLE6) each browser gets a
message, that the certifacte for this website was signed by an unknown
certifying authority.

internet <=> checkpoint <=> reverse proxy <=> webserver

squid.conf:
[..]
https_port 192.168.XX.XX:443 cert=/usr/local/squid/etc/
www_domain.de.crt key=/usr/local/squid/etc/server.key

httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_single_host off
httpd_accel_with_proxy off
httpd_accel_uses_host_header on
[..]

my problem is, i don't nothing about ssl, how it works and so one. what can
i do, that ssl works properly with squid. why i have 3 files with apache and
only 2 with squid.

thx for your fast replies with a short description for a slow admin ;))

greetings from germany tom
Received on Thu Aug 12 2004 - 10:04:20 MDT