Search squid archive

Re: explicit forward proxy to server requring client authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
..... and a bit below in squid.conf.documented we can see.....

# SSL OPTIONS
# -----------------------------------------------------------------------------

#  TAG: sslproxy_client_certificate
#    Client SSL Certificate to use when proxying https:// URLs
#Default:
# none

#  TAG: sslproxy_client_key
#    Client SSL Key to use when proxying https:// URLs
#Default:
# none

Ta-daaaaaaaa!


18.05.16 3:11, Robert W Weaver пишет:
> Greetings, squid users and devs,
>
> I think this is usual, but I can't find examples, and I can't make it work. :-)
>
> The issue is I need to connect to a site that requires client authentication.  Don't want to put the key and cert on each individual user, so instead want the key and cert on the proxy.
>
> Diagram:
>
> User A ---> Squid S ---> Server B
>         ^            ^
>         |            +-- TLS client authentication
>         +-- cleartext okay
>
> I'm able to bump, but the client authentication to server B isn't working.  Configured cert and key on S with ssl-bump cert= .. key= .. but that isn't working.
>
> Is this not possible?
>
> --woody
>
>
> /-- 
> "I used to wish the universe were fair. Then one day it hit me: What if
> the universe were fair? Then all the awful things that happen to us in
> life, would happen because we deserved them. So now I take great pleasure
> in the general hostility and unfairness of things."
> -- Marcus, on Babylon 5/
>
>
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXO5W9AAoJENNXIZxhPexG94UH/AvnmThl9LLLY8WN61iYpMNl
YxemSMMLgw6OkDSuZvZ9m/IW2ErjqYwCgAaRRj8HFeswFYTpEgMz/gRB84JjvZ7k
xY+e2HRPXlFbwiWf/QxU9F5RjRpn3aAE+6Eh2mlae7WKPwcFUFbOmDy2fZOd+/B5
SIFYGnNtySFu7yQt4awIBlSPc0piEAZFn7+Wwis7NenRcsugkOO2hfCG95Yj3Htm
7OCvlBZvh/sDY4yguFgFNlDYt/0ux6LmTrkGHrNRgWWgtqesRdLSg2cAG+Xoh/ns
IILv3YSiTB9l8b80o3Jlp0dIPU0Y6d6B2ZBvVW9HOzXCI8uswYqIKGTT6qiBZSI=
=uzzn
-----END PGP SIGNATURE-----

Attachment: 0x613DEC46.asc
Description: application/pgp-keys

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux