Re: forward proxy with SSL Termination

[Chris Datfung <chris.datfung@xxxxxxxxx>]

On Fri, Jan 11, 2013 at 11:59 AM, Pete Houston <ph1@xxxxxxxxxxxxxxxx> wrote:

On Fri, Jan 11, 2013 at 11:37:44AM +0200, Chris Datfung wrote:
> How can I configure Apache to forward proxy requests while terminating SSL
> connections for inspection and then reencrypt the traffic?

That won't be trivial, which is a good thing otherwise https would be
pretty pointless from a privacy point of view.

I'm not sure why this shouldn't be doable with just Apache. Squid has sslbump, as well as the other options that you mentioned.

Chris

 

If you really do want to do this, then perhaps using something like
mitmproxy would be easier? http://mitmproxy.org/

Pete
--
Openstrike - improving business through open source
http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107