[squid-users] Re: Accelerator Windows Update : towards the end !

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 10 May 2004 00:34:15 +0200 (CEST)

Please keep discussion on squid-users.

Regards
Henrik

On Mon, 10 May 2004 sampei02@tiscali.it wrote:

> Squid accelerator + SSL update :
>
> when client requests https page, Squid accel.(which has installed SSL certificate)
> is able to see (by SSL update) http content of this one;
> 1) What's required reason allowing toSquid to see the HTTP content ?
> after this stage what kind of request Accelerator does to remote server
> ?
> 2) https or http ?! I hope https.
> 3) If I was accelerate MS Windows Update site, I should have installed 2
> SSL certificates ?! one in Squid accelerator and the another in Microsoft
> Windows Update ?!
> 4) What's the difference between "THE SQUID CERTIFICATE" and that one inside
> MS server ?!
> 5) Are Client and Squid accel. certificates only necessary to establish
> first communication towards Accel. regardless MS W.U. , then Squid does
> a "true" https request to remote server ?!
>
> I read in your words:
>
> >> Your other alternative is to provide direct plugs or NAT to the web server
> <<
>
> it's means that there is a possibility Squid Accelerator NAT every https
> request towards 443 port ?! Using FWTK TIS ?!
>
> thanks again to all squid-users.
>
>
>
>
>
>
>
> ----- Original Message -----
> From: "Henrik Nordstrom" <hno@squid-cache.org>
> To: <sampei02@tiscali.it>
> Cc: "Squid Users" <squid-users@squid-cache.org>; "Enr" <hno@squid-cache.org>
> Sent: Tuesday, May 04, 2004 10:41 PM
> Subject: Re: HTTPS accelerator
>
>
> > On Tue, 4 May 2004 sampei02@tiscali.it wrote:
> >
> > > I'm not again sure if I can accelerator HTTPS server using squid accelerator
> > > (2.5stable3) with SSL update Patch?
> >
> > You can.
> >
> > > I have to install SSL certficates on squid ?!
> >
> > Yes. To the user Squid is the SSL endpoint, not the web server. This is
>
> > required to allow Squid see the HTTP content.
> >
> > Your other alternative is to provide direct plugs or NAT to the web
> > server.
> >
> > Regards
> > Henrik
> >
>
> __________________________________________________________________
> Tiscali ADSL libera la velocita'!
> Attiva Senza Canone entro il 17 maggio: navighi a 1,5 euro l'ora per i primi
> 3 mesi,se scegli il modem e' tuo in comodato gratuito e in piu' hai gratis
> SuperMail per 12 mesi. Non aspettare, attivala subito!
> http://abbonati.tiscali.it/adsl/prodotti/640Kbps/
>
>
>
Received on Sun May 09 2004 - 16:34:19 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Jun 01 2004 - 12:00:01 MDT