-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 30/08/2014 6:55 a.m., Eduard Deffner wrote:
> Dear Team!
>
> My problem is about using squid in the forward proxy mode. Squid
> Version 3.3.8 under openSUSE 13.1 in conjunction with squidguard
> The general function everythings works well. But if any client in
> our LAN try to connect to a https-Site that have a invalid server
> certificate (the URL of the cert is other than the URL of the site)
> the proxy refuse the connection. If the cert is valid everything is
> OK.
If you are using proper forward proxy mode and CONNECT requests then
teh proxy has nothign to do with the HTTPS. All the proxy does is open
a TCP connection to the server and pump bytes back and forth between
client and server machines.
Anything related to te connection TLS is strictly between the client
and server software which are communicating over that tunnel.
Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
iQEcBAEBAgAGBQJUBH01AAoJELJo5wb/XPRj1KYIAJP/GAV7fN+sskeBlmrJiQGh
X6RBcmhU3WvSLcjIMoejFWFXZ9RvRXOOQxq5sGHcdMMIseF/ePusgkaHrJGstk3c
qZBpePyrgxh3r6i7KNSd99vsCo9u+786DtjO+1d7aXy09zgJJ6Hh/K2kysL/wO0C
LFt3XfKElULmqQqPEKWHcwRmAeXCXURVAjar7chuBa/333bWRMxt0l5O9y4I3AQg
7sVvpwGoEAg3el/PBxDgX1jiNuZziGSsMkqpiHldbF/gYLckgsckHB0bbU1hFjWP
xoCfTx3sgxCDTIJ9RPTEKOeE8BArCmqzyE8kYhaC7LIrJMXsxZzL26T0CQwU8QE=
=cJ+5
-----END PGP SIGNATURE-----
Received on Mon Sep 01 2014 - 14:05:53 MDT
This archive was generated by hypermail 2.2.0 : Mon Sep 01 2014 - 12:00:05 MDT