Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to locate a server overseas and run squid as a reverse proxy for our site. Say the site is:

This would point to

through squid. My issue is SSL. I know I'll have to buy a certificate for, but can I pass through the SSL to The setup would look like this <--> Squid server <-->

This whole chain of communication needs to be secure.

share|improve this question
up vote 1 down vote accepted

If your certificate on is publicly signed (opposed to self signed) you should not have any problems. If the certificate on if self signed you will need to either specify the CA cert in squid for or tell squid to ignore certificate errors (I recommend the first option though).

Plus a cert for to resecure all comms it replies to.

So you will need either a wildcard certificate for * or certs for both domains. Publicly or self signed.

The only point of unsecured communications then is the actual squid server that just decrypts requests and passes them secuarly on to

share|improve this answer

This is probably what you're looking for:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.