Re: [squid-users] how to set up squid as https accelerator ?

Hello Илья,

compile squid with --enable-ssl and optional --with-openssl= if your
ssl-devel not in /usr/include/openssl f.e.
--with-openssl=/usr/local/include

generate CA certificate (self-signed)
openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem \
-days 3650

generate certificate
openssl req -new -keyout key.pem -out req.pem -days 365
where req.pem - certificate request

sign this certificate with your CA cert
openssl ca -in req.pem -out cert.pem

remove unneeded lines from cert.pem (usually you only need
lines beetwen
-----BEGIN CERTIFICATE-----
.........................
......................
-----END CERTIFICATE-----

add this in squid.conf

https_port [ip_address:]port cert=/where/cert.pem key=/where/key.pem

If you have problem try email direct to me. May be I can help you.
sorry for my english

-----------------------------------
mailto:alexey_talikov@texlab.com.uz
BR
Alexey Talikov
FORTEK
-----------------------------------
Received on Tue Oct 22 2002 - 06:32:56 MDT