On Thu, 15 Sep 2011, Damien Martins wrote:
I'd like to provide a proxy (using Squid) trought SSL.
I know how to let people access URL in https://
But I'd like them to connect to the proxy trought SSL connection.
Thank for any tip, link, information regarding my case
Read up on a program called "stunnel".
You could use it to set up a SSL tunnel for proxy traffic like this:
(I hope my ASCII art doesn't get too mangled...)
Client_A on Net A
Web Browser (proxy = http://Server_A:12345/)
|
\_/
Server_A on Net A
stunnel listening on 12345/tcp
|||
||| SSL tunnel
|||
{untrusted networks}
|||
|||
\_/
Server_B1 on Net B
stunnel listening on 23456/tcp
|
\_/
Server_B2 on Net B
Squid listening on 3128
I'm assuming this is what you mean by "connect to proxy through SSL".
stunnel can use certificates to ensure only Server_A can access
the proxy via Server_B1, if that's a concern.
Also: Server_A and Client_A could be the same computer, and Server_B1 and
Server_B2 could also be the same computer.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@xxxxxxxxxx FALaholic #11174 pgpk -a jhardin@xxxxxxxxxx
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
If "healthcare is a Right" means that the government is obligated
to provide the people with hospitals, physicians, treatments and
medications at low or no cost, then the right to free speech means
the government is obligated to provide the people with printing
presses and public address systems, the right to freedom of
religion means the government is obligated to build churches for the
people, and the right to keep and bear arms means the government is
obligated to provide the people with guns, all at low or no cost.
-----------------------------------------------------------------------
2 days until the 224th anniversary of the signing of the U.S. Constitution
