[squid-dev] Online Translator interface for Squid

[Alex Rousskov]

On 09/14/2017 12:20 AM, Jeffrey Merkey wrote:

>>> I have reviewed the ssl-bump feature
>>> -- perfect just what I needed the proxy to do.

>> https://wiki.squid-cache.org/Features/DynamicSslCert

> Can I just use one certificate, or do I need to enable this dynamic capability.

In most environments, probably including yours, dynamic certificate
generation is a must. You only need one (Root CA) certificate for that
though. If you decide to open this Pandora box, please direct your
SslBump usage questions to the squid-users mailing list.


Thank you,

Alex.