Re: [squid-users] SSL Caching - How to

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 29 Jun 2001 16:03:12 +0200

Well, there is support for SSL->HTTP gatewaying in squid-2.5 development
versions, SSL in browsers, clear text to servers. Intended for when you
build a web site "accelerator" supporting https, and have a protected
network between the "accelerator" and your server.

The development version does not yet support HTTP->HTTPS gatewaying or
HTTPS->HTTPS gatewaying. This is on the todo.

Normal SSL traffic cannot be cached by a proxy as it is protected by
SSL. Caching can only be performed at the SSL endpoints (client or the
SSL server having the servers certificate).

--
Henrik Nordstrom
Squid hacker
Joel Jaeggli wrote:
> 
> there exist ssl proxies (or more properly gateways) but they do somthing
> different than what you're asking (clear in one-side ssl out the other)
> for the purpose of supporting lightwieght clients... given the model squid
> uses ssl caching is effectivly impossible, becaase the connection is
> between the client and the remote host... the squid can only relay bcause
> it's not party to the encryption being used on the session.
> 
> joelja
Received on Fri Jun 29 2001 - 09:32:18 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:53 MST