Re: [squid-users] squid reverse proxy and https

Marc Elsen wrote:
>
> ...
>
>>> I believe this is possible , now with squid 2.5.
>>
>>Only half of what is pictured above is possible with any current Squid:
>>
>>client -- (https) --> Squid --- (http) ---> origin server
>>
>>i.e. The client can talk https to Squid, but Squid can't talk https to
>>the origin. As far as I know anyway.
>>
>
>
> I may have been confused here. I was talking about squid as accel.
> I thought this was possible in 2.5.
>
> The original diagram can ,maybe ,interpreted in two ways...

Can it? The original poster specified it was an accelerator topology (I
think...maybe I misread). Squid can't do an https connection to the
origin when acting as an accelerator under any circumstances that I'm
aware of. But it can act as an https endpoint for a client connection.
  This /is/ a cool new feature, but it isn't quite as cool as you want
it to be. ;-)

Henrik wrote the code, so he may have more thoughts on this, but I'd be
surprised if it is possible with the current code.

-- 
Joe Cooper <joe@swelltech.com>
http://www.swelltech.com
Web Caching Appliances and Support