[squid-users] SQUID 3.1 + sslBump https interception and decryption

Hi,

I need for testing purpose (i have to test and debug several mobile
phone java application some of that using https/ssl) to intercept and
decrypt https traffic;

I configured one debian box with squid 3.1 (compiling it with ssl
support) enabling sslBump feature with a self signed certificate,
obviously browser and
applications warn about the certificate but all seems to work.

Is there a way to use trusted certificate for removing that warning
(sorry for this dumb question but some applications doesn't permit
certificate exception list like firefox for example)?

Another question is about ICAP, i read on Squid-cache wiki that is
possible to use ICAP server to inspect traffic ("While decrypted, the
traffic can be inspected using ICAP"), is there some hints regarding
which ICAP server use (C-ICAP? or other ICAP server) and some
configuration example about it? I didn't find many informations about.

Thanks for your patience

Best Regards

Franz
Received on Wed Apr 21 2010 - 18:13:35 MDT