Re: [squid-users] Reverse proxy with SSL.

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 12 Apr 2002 00:26:10 +0200

What do you get in access.log?

Do your redirector operate correctly to deal with the rewrites required
by "httpd_accel_host virtual"?

Squid supports any number of SSL ports. No limitation there as long as
you have IP addresses..

You might want to take a look at the link in my sig below ;-)

Regards
Henrik

Mark Velasquez wrote:
>
> ALL,
>
> I'm also trying to use squid as a reverse proxy for SSL, and am
> unable to make it work. Any guidance would be appreciated. I created
> self-signed certificates as I would when setting up an apache+mod_ssl
> server... but after starting squid it never fully starts and dies..
>
> The config of my test server looks as follows :
>
> http_port 10.10.10.234:80
> https_port 10.10.10.234:443 cert=/usr/local/etc/server.crt
> key=/usr/local/etc/server.key
> httpd_accel_host virtual
> httpd_accel_port 0
> httpd_accel_uses_host_header off
> httpd_accel_single_host off
> cache_dns_program /usr/local/squid/libexec/dnsserver
> redirect_program /usr/local/squid/etc/rproxy_redirector.pl
> redirect_children 5
>
> <snip>
>
> Typically we use one host with mulyiple virtual interfaces and squid
> listening on the multiple IP Addresses..
>
> This config( sans the https_port stuff) works fine for regular http
> ...
>
> Of course, maybe you can't use squid as we're trying to do... a
> one-to-many reverse-proxy for https...
>
> TIA
> Mark
>
>
> "Squid Support (Henrik Nordstrom)" wrote:
>
> > On Monday 08 April 2002 14:01, Barty, Joe wrote:
> > > I have a server running HTTPS only on port 443, can I configure my
> >
> > > Squid server to reverse proxy?
> >
> > Sort of, by using Squid-2.5 and moving your SSL certificates to
> > Squid.
> > HTTP will be used between Squid and the server however so you may
> > need to reconfigure the server to also accept HTTP requests.
> >
> > --
> > MARA Systems AB, Giving you basic free Squid support
> > Your source of advanced web reverse proxying solutions
> > http://www.marasystems.com/products/
Received on Thu Apr 11 2002 - 16:24:00 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:32 MST