[squid-users] SSL MITM with unencrypted parent proxy

Chris Bennett chris at ceegeebee.com
Tue May 5 11:19:59 UTC 2015


Hi Amos,

Thanks for the quick reply.

> However, explicit proxies can receive TLS connections. The two proxies
> will happily use those connections for any type of traffic, including
> ones like https:// with special security requirements.
> 
> * Configure the squid2 with an https_port for receiving regular proxy
> traffic (but over TLS/SSL).
> 
> * Configure the squid1 cache_peer parent line with "ssl" option (and any
> supporting options that may be required or desired).

I don't think this would allow me to use wanproxy at any point on both
sides of the configuration though, or am I misunderstood?

Regards,

Chris


More information about the squid-users mailing list