Re: [squid-users] Re: Reverse Proxy SSL + Certificates

On Thu, 2 Dec 2004, David Delamarre wrote:

> https_port 443

You need to at an absolute minimum specify the SSL server certificate
Squid should use while acceitping the SSL connection from the client.

> client ======>reverse squid=====>Server
> https https

Squid-2.5 without SSL update is not capable of initiating SSL connections,
only allowing you the following configuration

client == HTTPS ==> squid == HTTP ==> Server

If what you want is to publish the webserver as-is without a proxy
inbetween terminating the SSL connection then Squid is not the tool you
are looking for and you should be using NAT or a simple TCP plug to
publish the servers https port on the Internet. This is required if your
server require the use of client certificates etc as these can not be
proxied.

Regards
Henrik
Received on Thu Dec 09 2004 - 18:12:03 MST