Re: [squid-users] SSL Caching - How to

Well, there is support for SSL->HTTP gatewaying in squid-2.5 development
versions, SSL in browsers, clear text to servers. Intended for when you
build a web site "accelerator" supporting https, and have a protected
network between the "accelerator" and your server.

The development version does not yet support HTTP->HTTPS gatewaying or
HTTPS->HTTPS gatewaying. This is on the todo.

Normal SSL traffic cannot be cached by a proxy as it is protected by
SSL. Caching can only be performed at the SSL endpoints (client or the
SSL server having the servers certificate).

--
Henrik Nordstrom
Squid hacker
Joel Jaeggli wrote:
> 
> there exist ssl proxies (or more properly gateways) but they do somthing
> different than what you're asking (clear in one-side ssl out the other)
> for the purpose of supporting lightwieght clients... given the model squid
> uses ssl caching is effectivly impossible, becaase the connection is
> between the client and the remote host... the squid can only relay bcause
> it's not party to the encryption being used on the session.
> 
> joelja