RE: [squid-users] Accelerator Mode question

From: Paolo Biancolli <[email protected]>
Date: Fri, 31 Mar 2006 08:56:05 +0200

Hi Henrik,

Thanks for the reply. Does this mean if I need to authenticate to a
server over ssl through a squid reverse proxy, I won't be able to as the
ssl session terminates at squid and then a new one starts up to the
backend server?

Where can I get the ssl patch from?

Many thanks
Paolo Biancolli

-----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: 30 March 2006 12:23 AM
To: Paolo Biancolli
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Accelerator Mode question

ons 2006-03-29 klockan 16:40 +0200 skrev Paolo Biancolli:

> Does squid (2.5 or 3) support https on the front end https and
backend.

Squid-3 yes.

Squid-2.5 only with the SSL update patch.

But note that the SSL is terminated at Squid. The SSL to the backend is
a new SSL connection between Squid and the backend. One noticeable
effect of this is that client side certificates can not be used for
client->backend authentication, and that the client only sees the
certificate of Squid, not the backend..

Regards
Henrik
Received on Thu Mar 30 2006 - 23:56:29 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:05 MST