Re: [squid-users] Reverse proxy with SSL.

From: Mark Velasquez <[email protected]>
Date: Thu, 11 Apr 2002 17:58:04 -0400

ALL,

  I'm also trying to use squid as a reverse proxy for SSL, and am unable to make it work. Any guidance would be appreciated. I created self-signed certificates as I would when setting up an apache+mod_ssl server... but after starting squid it never fully starts and dies..

The config of my test server looks as follows :

http_port 10.10.10.234:80
https_port 10.10.10.234:443 cert=/usr/local/etc/server.crt key=/usr/local/etc/server.key
httpd_accel_host virtual
httpd_accel_port 0
httpd_accel_uses_host_header off
httpd_accel_single_host off
cache_dns_program /usr/local/squid/libexec/dnsserver
redirect_program /usr/local/squid/etc/rproxy_redirector.pl
redirect_children 5

<snip>

 Typically we use one host with mulyiple virtual interfaces and squid listening on the multiple IP Addresses..

 This config( sans the https_port stuff) works fine for regular http ...

Of course, maybe you can't use squid as we're trying to do... a one-to-many reverse-proxy for https...

TIA
Mark
 

"Squid Support (Henrik Nordstrom)" wrote:

On Monday 08 April 2002 14:01, Barty, Joe wrote:
> I have a server running HTTPS only on port 443, can I configure my
> Squid server to reverse proxy?

Sort of, by using Squid-2.5 and moving your SSL certificates to Squid.
HTTP will be used between Squid and the server however so you may
need to reconfigure the server to also accept HTTP requests.

--
MARA Systems AB, Giving you basic free Squid support
Your source of advanced web reverse proxying solutions
http://www.marasystems.com/products/

-- 
+++++++++++++++++++++++++++++++++++++++
Mark S. Velasquez, M.Sc. Engineering
Senior Specialist, IT Security 
South Florida Water Management District
(561) 682-6993
+++++++++++++++++++++++++++++++++++++++

  Received on Thu Apr 11 2002 - 15:58:09 MDT