<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
1. You need to configure Squid with SSL Bump to capture HTTPS
traffic.<br>
2. You need to configure forwarded requests with splice/no bump. :)<br>
<br>
10.11.15 22:42, Ahmad Alzaeem пишет:<br>
<span style="white-space: pre;">> Hi Guys I want proxy and I
want it to forward http & https to remote proxy<br>
><br>
> <br>
><br>
> Does the command below enogh ?<br>
><br>
> <br>
><br>
> cache_peer 10.12.0.32 parent 8080 0 no-query no-digest
no-tproxy<br>
> proxy-only</span><br>
No.<br>
<span style="white-space: pre;">><br>
><br>
> <br>
><br>
> or I need to add other line for https ??</span><br>
No.<br>
<span style="white-space: pre;">><br>
><br>
> <br>
><br>
> BTW the command line above work only for http not for https </span><br>
Sure.<br>
<span style="white-space: pre;">><br>
><br>
> <br>
><br>
> Any help ?</span><br>
<br>
*** DISCLAMER: THIS IS MY OWN CONFIG SNIPPET. DON'T BLIND
COPY-N-PASTE IT IN YOUR ENVIRONMENT! ***<br>
<br>
# Privoxy+Tor acl<br>
acl tor_url dstdom_regex "C:/Squid/etc/squid/url.tor"<br>
<br>
# SSL bump rules<br>
sslproxy_cert_error allow all<br>
acl DiscoverSNIHost at_step SslBump1<br>
ssl_bump peek DiscoverSNIHost<br>
acl NoSSLIntercept ssl::server_name_regex -i
"C:/Squid/etc/squid/url.nobump"<br>
acl NoSSLIntercept ssl::server_name_regex -i
"C:/Squid/etc/squid/url.tor"<br>
ssl_bump splice NoSSLIntercept<br>
ssl_bump bump all<br>
<br>
# Privoxy+Tor access rules<br>
never_direct allow tor_url<br>
<br>
# Local Privoxy is cache parent<br>
cache_peer 127.0.0.1 parent 8118 0 no-query no-digest default<br>
<br>
cache_peer_access 127.0.0.1 allow tor_url<br>
cache_peer_access 127.0.0.1 deny all<br>
<br>
As you can see, this is just example. The idea described with first
two lines of my answer above.<br>
This snippet works for torified sites described in tor_url acl.<br>
NB: I do not guarantee this will work on your environment!<br>
<br>
<span style="white-space: pre;">><br>
><br>
> <br>
><br>
> <br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJWQi4dAAoJENNXIZxhPexG0SEH/jjiJogO+BkgsjCLjt394UQ6
<br>
0qniwV6kBg9daS/3AWrLE3VizP8LnsHwLo3EQi/hdcuY0QPZUwablWt0emGlkZ/w
<br>
EnUUeyuZwqV9EP2z+I3apwg49E9vVV/dv6+HJSkorj0ibMlTPvdT4nMKr/zywnp7
<br>
fLmyQ8Gfn418g8+SHcQvouHFGRRecLjLi/B9OjdsT29O0tpH628Spv5+JYBzGrqh
<br>
FulBz6tzRLpE8W3JHMJjSXEuXbjeI8F2TVPd23g0TeBQaNMKAJwR9qPiYBgBJBhW
<br>
9Wk45ccPcwFHxZJgVZCkfj0SHVvnNX3A7tCwldQNFh9DveKtobRJTntMGqljwWI=
<br>
=dgIc
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>