RE: Accelerated SSL

From: Peter Robinson <peterr@dont-contact.us>
Date: Tue, 26 Feb 2002 10:28:11 +0800

Hi Adrian,

Yes, I know about that side of things but there is a bug when compiling it
on 6.2. The bits that I wasn't sure about was what you confirmed in the
last line - that it can't forward the https request.

Thanks
Peter

> Hi,
>
> squid-2.5 can act as an SSL "accelerator" - it can accept incoming SSL
> requests (squid has the certificate/key), and forward a HTTP request
> (_not_ HTTPS) to the origin server (say, iis.)
>
>
>
>
> adrian
>
> On Mon, Feb 25, 2002, Peter Robinson wrote:
> > Hi All,
> >
> > Not sure if this is a 'stupid' question or not regarding squid and
> > accelerated caching or not. Can squid act as a accelerated
> cache (more
> > like a pass through cache) for ssl connections like it does for ssl
> > 'proxying'?
> >
> > To explain some more. I have a number of sites using squid
> as a mask for
> > IIS servers running various sites so that iis isn't visible
> to the outside
> > world as I do't believe it is 'old enough to be let out
> alone :)'. I now
> > have a number of sites that wish to run the same iis box
> with ssl (secure
> > iis - bit of an oxymoron really) and have two running with
> squid doing the
> > ssl for them to take take the load off the iis servers (how
> is the fix
> > for 6.2 and the automake problem going :) but have a couple
> of sites that
> > want to use it as a standard accel pass-through cache, I
> don't think this
> > is possible but it did make mention in the FAQ of some
> people working on a
> > 'decrypt' thing for ssl. Is this relivant? Or can squid be
> just configured
> > as a reverse proxy say for people running a web server on a
> network of
> > non-real addresses behind a firewall running squid?
> >
> > Peter
> >
Received on Mon Feb 25 2002 - 19:23:40 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:14:49 MST