RE: [squid-users] Squid as HTTPS Proxy Server

I'm actually not using a browser as the client. I'm using an IPTV streaming
client that does support both HTTP and HTTPS proxy.

On squid 2.x when I attempt to connect I see the following error in
cache.log:

2009/02/04 18:30:30| clientNegotiateSSL: Error negotiating SSL connection on
FD 25: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy
request (1/-1)

On squid 3.x when I attempt to connect I do not see anything in access.log
or cache.log.

Keefe

-----Original Message-----
From: crobertson_at_gci.net [mailto:crobertson_at_gci.net]
Sent: Wednesday, February 04, 2009 2:01 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Squid as HTTPS Proxy Server

Keefe John wrote:
> Hello,
>
> I currently have a standard squid proxy server setup doing forward
> proxying. I'd like to encrypt the traffic between the clients and the
> squid server.

Have you found a browser that supports this? None of the big four (IE,
Firefox, Safari or Chrome) do. All support proxying HTTPS traffic
(CONNECT tunneling), but none encrypt all traffic between themselves and
the proxy.

> Can squid act as standard proxy and accept HTTPS Proxy
> requests? I understand that this is not possible in squid 2.x but
> possibly 3.x. Any help would be greatly appreciated.
>

Look into using a tool such as stunnel (http://www.stunnel.org/).

> Thanks,
>
> Keefe

Chris
Received on Thu Feb 05 2009 - 00:41:11 MST