Re: [squid-users] HTTPS CONNECT issue

From: Francis Turner <turner@dont-contact.us>
Date: Wed, 09 Jan 2002 18:30:33 +0100

Joe Cooper wrote:

> Robert missed the bit of your first post about transparent redirection
> (or he mentally blocked it out, as interception proxying gives him fits
> ;-). You cannot transparently redirect SSL packets to Squid--it doesn't
> know what to do with them. It will not work.

I kind of feared that was the case.

> If you were using any form of traditional proxying, Robert's FAQ pointer
> would be quite sound advice, and you probably wouldn't be having this
> trouble.

Yes, in fact I got it all working fine as a non-transparent proxy-proxy thing.

But at least some of the point of installing squid was to hide the disgusting

firewall/proxy from my unfortunate users because we have various

apps that aren't well written and don't understand the need to have a
proxy and especially a proxy that requires you to authenticate with it.

However it looks like squid will run in both transparent and
non-transparent mode at the same time so I think I can fake it

Francis

PS yes if I had access to the other firewall none of this would be a
problem. But thats politically not possible :-(

-- 
Francis Turner, CIO Juelich Enzyme Products GmbH
http://www.juelich-enzyme.com/ +49-173-291-7278
If you're not part of the solution, you're part of the precipitate.
             -- Henry J. Tillman
Received on Wed Jan 09 2002 - 10:31:30 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:47 MST