Search squid archive

Re: Certificate server validation

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 19/01/2013 3:37 a.m., vincent viard wrote:
Hello,

I ask you about the feasibility of achieving an validation server
certificates used during session establishment SSL/TLS in HTTPS at the
level of SQUID proxy ?
The idea is not to break the SSL session with a man-in-the-middle (ex.
SSLBump), but to authenticate (and to authorize) the target with a
white or black list of CAs. In other words, realize with Squid, the
first validation of the SSL handshake logically made by the client
browser on the certificate of server.

In advance, thank you and good day.

Vince

Please see http://wiki.squid-cache.org/Features/SslServerCertValidator

This feature is merged and will be in 3.4 series when it is released. To use it now you need to build the 3.HEAD Squid sources.

Amos



[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux