Search squid archive

Re: proxy over SSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Damien, 
 
You may also use Apache with a patched mod_proxy. See here : https://issues.apache.org/bugzilla/show_bug.cgi?id=29744
 
This is however not officially supported by Apache. 
 
Regards, 
  

Le Sep 16, 2011 à 3:59 AM, John Hardin a écrit :

> On Thu, 15 Sep 2011, Damien Martins wrote:
> 
>> I'd like to provide a proxy (using Squid) trought SSL.
>> I know how to let people access URL in https://
>> But I'd like them to connect to the proxy trought SSL connection.
>> 
>> Thank for any tip, link, information regarding my case
> 
> Read up on a program called "stunnel".
> 
> You could use it to set up a SSL tunnel for proxy traffic like this:
> (I hope my ASCII art doesn't get too mangled...)
> 
>  Client_A on Net A
>  Web Browser (proxy = http://Server_A:12345/)
>   |
>  \_/
>  Server_A on Net A
>  stunnel listening on 12345/tcp
>  |||
>  ||| SSL tunnel
>  |||
> {untrusted networks}
>  |||
>  |||
>  \_/
>  Server_B1 on Net B
>  stunnel listening on 23456/tcp
>   |
>  \_/
>  Server_B2 on Net B
>  Squid listening on 3128
> 
> I'm assuming this is what you mean by "connect to proxy through SSL".
> 
> stunnel can use certificates to ensure only Server_A can access the proxy via Server_B1, if that's a concern.
> 
> Also: Server_A and Client_A could be the same computer, and Server_B1 and Server_B2 could also be the same computer.
> 
> -- 
> John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
> jhardin@xxxxxxxxxx    FALaholic #11174     pgpk -a jhardin@xxxxxxxxxx
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>  If "healthcare is a Right" means that the government is obligated
>  to provide the people with hospitals, physicians, treatments and
>  medications at low or no cost, then the right to free speech means
>  the government is obligated to provide the people with printing
>  presses and public address systems, the right to freedom of
>  religion means the government is obligated to build churches for the
>  people, and the right to keep and bear arms means the government is
>  obligated to provide the people with guns, all at low or no cost.
> -----------------------------------------------------------------------
> 2 days until the 224th anniversary of the signing of the U.S. Constitution




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux