I've never dealt with setting up a proxy server and that is why a bit puzzled about how to set up a rather complicated config.Help me, please!
I've got squid running with login/password authentication, that was simple. Complicated things start now. I have a website that requires client https certificate in order to access it and a portable browser which should access this site via the proxy WITHOUT the certificate installed.In that case the client certificate should be installed on proxy server as well as some kind of special behavior if the browser tries to access specific URL (is this url-rewrite?)
I set up stunnel in client mode, so that if I try to access
http://127.0.0.1/some_url_here from the server where proxy is running I have the necessary site loaded. But every link on the webpage starts with
https:// (should start with
http://) which leads to "SSL received a record that exceeded the maximum permissible length." error in Firefox.
And that's the problem which I cannot solve. I see two possibilities. First one is to set up something (don't know what exactly) in squid so that is changes all
https:// strings to
http://. Second one is to set up another instance of stunnel so that it accepts SSL connection and passes the requests and replies to and from the first stunnel instance. In first case the connection between browser and "site" is unsecured, in the second I need to have a valid certificate for the second stunnel instance. And I guess that if I set up URL rewriting in squid, that certificate should be issued for the remote website that should be accessed through the proxy.
Apart from the problem I described in previous paragraph, I have an another one - the correct redirection to the local server, where proxy and stunnel are configured, of all the requests to the remote website. I this called URL-rewriting or should another technique be used? I mean, the browser should not be redirected to another URL, it just should receive the data not from the remote server, but from the stunnel instance.
So, how do I configure all of this?