0
votes
1answer
23 views

Squid upgrade HTTP to HTTPS

I want to use squid to upgrade HTTP request to HTTPS using my own certificate in order to do a client handshake with a server (a reverse proxy) that requires mutual authentication. How can I ...
0
votes
2answers
50 views

nginx reverse proxy or squid forward proxy (transparent)?

I have to implement a proxy server in front of a running production server to route and secure the production-server. On the production server multiple node.js applications listening on different ...
0
votes
0answers
18 views

Cygwin - Squid SSL bump

I've done a full installation of cygwin on a windows server 2008 r2. I installed squid through the setup.exe My problem is this: I need ssl-crtd to be enabled on my Squid. When I did this on Ubuntu I ...
0
votes
0answers
74 views

Squid 2.6 and https trasparent proxy

I have a question about Squid configuration as trasparent proxy using SSL. I would to use Squid 2.6 as trasparent proxy with http and https connection. I followed this steps: 1) I configurated my ...
0
votes
0answers
521 views

Multiple SSL certificates with Squid reverse proxy

I have been upgrading my network from using an apache reverse proxy (Not quite powerful enough) to a Squid proxy configured just for reverse use. My squid proxy is on a CentOS 6 VM, and currently ...
0
votes
0answers
155 views

Squid proxy connect method for SSL connections not working with people who are running nginx

I have a system which looks like this: Tomcat Server (has haproxy installed and balances my proxy servers) >> squid proxy server >> outside. This is the connection flow. My tomcat instance stores ssl ...
3
votes
1answer
395 views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
0
votes
0answers
70 views

HTTP over HTTPS using Squid proxy

I'd like to configure Squid3 proxy to work as a HTTPS forward proxy (not transparent) for all requests (both HTTP and HTTPS). I want a HTTPS connection between my browser and Squid irrespective of the ...
0
votes
0answers
151 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
0
votes
2answers
74 views

Web caching with SSL connection and dynamic contents

I have some questions about web-caching systems. If I use systems like Squid, Varnish as reverse-proxy in front of my architetture: Is possible to have SSL connection from user to my proxy and SSL ...
1
vote
0answers
696 views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
0answers
127 views

Squid https_port not responding

I set up an squid with https_port. My goal is to connect from browser to squid with ssl. documentation says that squid can handle this kind of browser-squid connection. So i set https_port with ...
0
votes
0answers
187 views

Squid configuration for accessing https site requring client certificate using url-rewrite

I've never dealt with setting up a proxy server and that is why a bit puzzled about how to set up a rather complicated config.Help me, please! I've got squid running with login/password ...
1
vote
1answer
253 views

Squid ssl_bump server_first

I am trying to test the ssl_bump server_first Squid directive, but I did not understand how it works. As far as I understood the ssl_bump directive has three working modes: None: HTTPS traffic is ...
2
votes
1answer
515 views

How To Enable HTTPS filtering with Squid3 and Qlproxy?

I'm trying to set my proxy to filter HTTPS traffic just like the HTTP traffic. I have followed this guide for setup SSLBump If I set it, even the HTTP traffic won't be accepted through the proxy. ...
0
votes
1answer
269 views

SQUID Transparent SSL proxy (no intercept)

I know how to have squid work as a transparent proxy. You put it into transparent mode then use your router or IPTABLES to forward port 80 to the squid port. I would like to do the same for SSL. ...
3
votes
1answer
3k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
0
votes
2answers
2k views

https proxying with squid and local CA produced site certificates

At the moment I redirect http(443) requests into squid configured https_port. It works as expected. It terminate ssl connection with the ssl certificate installed in Squid. And then proxies traffic. ...
0
votes
1answer
245 views

Squid incorrectly serving cache HIT after SSL unwrapping

We have a cloud setup like this: User Request -> Perlbal (SSL unwrapping) -> Squid (Caching) -> Apache -> HTTP Response We support SSL on some pages, and not on others. Everything ...
0
votes
1answer
200 views

How do I get squid peers to talk SSL to each other?

How would I set up a pair of squid proxies so that one uses the other as a parent and all traffic between them is encrypted using SSL? I've read the cache_peer documentation, but it's all very fuzzy ...
3
votes
1answer
2k views

Squid reverse proxy with optional SSL

I'm trying to set up squid as a load-balancing reverse-proxy, and I'm having a bit of trouble with the SSL. One of the site's applications checks to see if a site is loaded over SSL, and behaves ...
5
votes
3answers
1k views

Squid authentication encryption

I use Squid and the users must authenticate. The users are authenticating in cleartext. I found tutorials about stunnel (http://www.jeffyestrumskas.com/?page_id=3), but the clients also need this ...
3
votes
2answers
3k views

Squid and SSL Reverse Proxy

I'd like to locate a server overseas and run squid as a reverse proxy for our site. Say the site is: eu.website.com This would point to www.website.com through squid. My issue is SSL. I know ...