<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
..... and a bit below in squid.conf.documented we can see.....<br>
<br>
# SSL OPTIONS<br>
#
-----------------------------------------------------------------------------<br>
<br>
# TAG: sslproxy_client_certificate<br>
# Client SSL Certificate to use when proxying <a class="moz-txt-link-freetext" href="https://">https://</a> URLs<br>
#Default:<br>
# none<br>
<br>
# TAG: sslproxy_client_key<br>
# Client SSL Key to use when proxying <a class="moz-txt-link-freetext" href="https://">https://</a> URLs<br>
#Default:<br>
# none<br>
<br>
Ta-daaaaaaaa!<br>
<br>
<br>
18.05.16 3:11, Robert W Weaver пишет:<br>
<span style="white-space: pre;">> Greetings, squid users and
devs,<br>
><br>
> I think this is usual, but I can't find examples, and I can't
make it work. :-)<br>
><br>
> The issue is I need to connect to a site that requires client
authentication. Don't want to put the key and cert on each
individual user, so instead want the key and cert on the proxy.<br>
><br>
> Diagram:<br>
><br>
> User A ---> Squid S ---> Server B<br>
> ^ ^<br>
> | +-- TLS client authentication<br>
> +-- cleartext okay<br>
><br>
> I'm able to bump, but the client authentication to server B
isn't working. Configured cert and key on S with ssl-bump cert=
.. key= .. but that isn't working.<br>
><br>
> Is this not possible?<br>
><br>
> --woody<br>
><br>
><br>
> /-- <br>
> "I used to wish the universe were fair. Then one day it hit
me: What if<br>
> the universe were fair? Then all the awful things that happen
to us in<br>
> life, would happen because we deserved them. So now I take
great pleasure<br>
> in the general hostility and unfairness of things."<br>
> -- Marcus, on Babylon 5/<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXO5W9AAoJENNXIZxhPexG94UH/AvnmThl9LLLY8WN61iYpMNl
<br>
YxemSMMLgw6OkDSuZvZ9m/IW2ErjqYwCgAaRRj8HFeswFYTpEgMz/gRB84JjvZ7k
<br>
xY+e2HRPXlFbwiWf/QxU9F5RjRpn3aAE+6Eh2mlae7WKPwcFUFbOmDy2fZOd+/B5
<br>
SIFYGnNtySFu7yQt4awIBlSPc0piEAZFn7+Wwis7NenRcsugkOO2hfCG95Yj3Htm
<br>
7OCvlBZvh/sDY4yguFgFNlDYt/0ux6LmTrkGHrNRgWWgtqesRdLSg2cAG+Xoh/ns
<br>
IILv3YSiTB9l8b80o3Jlp0dIPU0Y6d6B2ZBvVW9HOzXCI8uswYqIKGTT6qiBZSI=
<br>
=uzzn
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>