[squid-users] Reverse Proxy not re-encrypt SSL

Dear

I'm using Squid 3.2.4 in reverse mode with multiple SSL web servers

I need to force squid to not use the default certificate for specific target
Web servers and i did not know how to do...
I'm turning around this issue...

Example:
http_port 80 accel vhost
https_port 443 accel cert=/etc/squid3/ssl/cacert.pem
key=/etc/squid3/ssl/privkey.pem vhost

For this cache_peer i need to squid just forward SSL requests (CONNECT
method) to the remote server and not re-encrypt the SSL in order to let the
remote web server establishing the SSL tunnel.

cache_peer 10.32.0.10 parent 443 0 no-query originserver ssl
sslflags=DONT_VERIFY_PEER name=ssldef

Is it possible to do that ?
Or when settings accel 443 port, all SSL web sites are mandatory
re-encrypted ?

Best regards
Received on Fri Dec 14 2012 - 00:23:52 MST