Re: [squid-users] squid - transparent + sslbump + all via parent proxy

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 05 Sep 2011 10:42:06 +1200

 On Mon, 5 Sep 2011 00:15:15 +0200, Markus Ferlitsch wrote:
> Hi,
>
> I only have internet-connection via http/https proxy.
>
> squid in transparent mode via the parent proxy works!
> But for my HTC mobile I also need https connections.
>
> Now I want to use squid in transparent mode + sslbump and all http /
> https requests should take the way over the parent proxy.

 ssl-bump is the process of decrypting a CONNECT request. Intercepted
 (aka "transparent") traffic does not contain CONNECT requests.

 Squid also does not (yet) re-encrypt when sending traffic via peers.
 This is why we block it instead.

>
> Here someone tried it with squid 3.1.0.15_beta-r1.
>
> http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-3-0-19-transparent-sslbump-td1679105.html
>
> I tried it squid 3.1.15 but https connections won't be opened.
>
> The man-in-the-middle problem is not important for me because I only
> use it on my HTC mobile.

 Thank you for the permission to violate your privacy, posted in a
 permanent public archive no less :)

 Amos
Received on Sun Sep 04 2011 - 22:42:11 MDT

This archive was generated by hypermail 2.2.0 : Wed Sep 07 2011 - 12:00:04 MDT