Re: [squid-users] Share HTTPS over SQUID

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 14 Dec 2010 01:30:01 +0000

On Mon, 13 Dec 2010 21:27:39 +0200, Ghassan Gharabli wrote:
> Does OpenSSL work on Windows ?
>

Guido has an "experimental" 2.7 package available with SSL ...
http://squid.acmeconsulting.it/

>
> ANd does that mean I can use HTTPS to share with customers through
SQUID!
>

Squid older than 3.2 cannot decrypt. 3.2 will only do so for
non-intercepted traffic.

You must configure all the customers browsers to use the proxy directly
then ssl-bump the transaction. WPAD/PAC setup can assist with simplifying
the browser configuration.

Amos

>
> On Mon, Dec 13, 2010 at 9:25 PM, Ghassan Gharabliwrote:
>> Does OpenSSL work on Windows ?
>>
>>
>> ANd does that mean I can use HTTPS to share with customers through
SQUID!
>>
>>
>> Any Comments Please
>>
>> On Mon, Dec 13, 2010 at 9:33 AM, purgat <purgatio_at_gmail.com> wrote:
>>> Hey
>>> Someone else correct me if I am wrong but I believe you can use the
>>> guide at the beginning of
>>>
http://wiki.squid-cache.org/ConfigExamples/Reverse/SslWithWildcardCertifiate
>>> to create your keys. It is written for a *nix system but if you are a
>>> windows user I believe you can find a guide somewhere for OS of your
>>> choice and do these on your machine.
>>> good luck.
>>> Purgat
>>>
>>>
>>>
>>>
>>> On Mon, 2010-12-13 at 08:54 +0200, Ghassan Gharabli wrote:
>>>> Hello,
>>>>
>>>> I was trying to share HTTPS connection through Squid but it says that
>>>> i need a certificate to work!
>>>>
>>>>
>>>> The problem that I dont use Squid for a domain or with IIS! Im using
>>>> Squid as Transparent HTTP for caching purpose and to save traffic
thus
>>>> I also want share HTTPS if its possible to work with HTTP Transparent
>>>> Enabled .
>>>>
>>>>
>>>> I thought like I can forward https requests from MikroTik Router to
>>>> Windows Server 2003 that has Squid installed .
>>>>
>>>>
>>>> If it should work properly then how to create .pem file or a
>>>> certificate file ?
>>>>
>>>>
>>>> Many Thanks for your help
>>>
>>>
>>>
>>
Received on Tue Dec 14 2010 - 01:30:04 MST

This archive was generated by hypermail 2.2.0 : Tue Dec 14 2010 - 12:00:03 MST