Search squid archive

auth_param tls? limiting proxy access based on client TLS authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi folks,

Apologies if this is a faq or has treatment elsewhere but I can't find it.

I've got squid configured as an old-school explicit forward proxy.  

I would like to limit access through the proxy to only those clients that authenticate either to an HTTPS proxy listener or via client auth injected into a CONNECT request to the origin server.  Please note that in this use case the origin server is not expecting TLS auth in any way.  This is just being used initially to prevent unauthenticated clients from using the proxy.

Ideally we would be able to base access control on information derived from subject DN or other attributes in the certificate, but I'm just aiming for basic functionality right now.

I built 4.13 locally on Ubuntu and as far as I can tell all of the other SSL features are working (ssl_bump, generate-host-certificates, etc)

Thanks in advance for any advice!


_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux