Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'd like to locate a server overseas and run squid as a reverse proxy for our site. Say the site is:

eu.website.com

This would point to

www.website.com

through squid. My issue is SSL. I know I'll have to buy a certificate for eu.website.com, but can I pass through the SSL to www.site.com? The setup would look like this

eu.website.com <--> Squid server <--> www.website.com

This whole chain of communication needs to be secure.

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

If your certificate on www.website.com is publicly signed (opposed to self signed) you should not have any problems. If the certificate on www.website.com if self signed you will need to either specify the CA cert in squid for www.website.com or tell squid to ignore certificate errors (I recommend the first option though).

Plus a cert for eu.website.com to resecure all comms it replies to.

So you will need either a wildcard certificate for *.website.com or certs for both domains. Publicly or self signed.

The only point of unsecured communications then is the actual squid server that just decrypts requests and passes them secuarly on to www.website.com

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.