Search squid archive

Re: Reverse proxy with multiple SSL sites

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hey Roberto,

Yes but with limitations.
Squid can use only one certificate per ip:port pair.
This leaves you with the only option of using squid with one certificate that overlaps multiple domains in the form of "*.domain.com" which will include all domain.com and subdomains.

There is a function which is not in use by squid that is called SNI which allows the client to request a specific site\domain on the first stages of the SSL negotiation which allows the service to send a specific certificate as default and others in a case of a matched domain from by SNI.

As far as I can tell and remember apache and nginx supports SNI.

Regards,
Eliezer

On 06/09/2014 06:15 PM, Roberto Carna wrote:
Dear, just one question...is it possible to use a Squid reverse proxy
with several SSL sites/certificates, all listening in TCP/443 in the
same public IP ???

Thanks a lot,

Roberto





[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux