<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
<br>
<br>
18.05.16 3:11, Robert W Weaver пишет:<br>
<span style="white-space: pre;">> Greetings, squid users and
devs,<br>
><br>
> I think this is usual, but I can't find examples, and I can't
make it work. :-)<br>
><br>
> The issue is I need to connect to a site that requires client
authentication. Don't want to put the key and cert on each
individual user, so instead want the key and cert on the proxy.<br>
><br>
> Diagram:<br>
><br>
> User A ---> Squid S ---> Server B<br>
> ^ ^<br>
> | +-- TLS client authentication<br>
> +-- cleartext okay<br>
><br>
> I'm able to bump, but the client authentication to server B
isn't working. Configured cert and key on S with ssl-bump cert=
.. key= .. but that isn't working.</span><br>
Because these parameters is for bump, from squid to server. Not for
client certificate.<br>
<span style="white-space: pre;">><br>
> Is this not possible?</span><br>
You doing it wrong.<br>
<br>
When we read squid.conf.documented, a bit below we can see:<br>
<br>
# clientca= File containing the list of CAs to use when<br>
# requesting a client certificate.<br>
#<br>
<br>
<span style="white-space: pre;">><br>
> --woody<br>
><br>
><br>
> /-- <br>
> "I used to wish the universe were fair. Then one day it hit
me: What if<br>
> the universe were fair? Then all the awful things that happen
to us in<br>
> life, would happen because we deserved them. So now I take
great pleasure<br>
> in the general hostility and unfairness of things."<br>
> -- Marcus, on Babylon 5/<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXO5T2AAoJENNXIZxhPexGzrwH/2Sk8ins4kzXjWX55mvE10nh
<br>
HSd4T5e4inQihmPlV6xPB/+HugHcBU1Zuxi9Mmy/BuvB1axMW7BRfC+COSenxpaI
<br>
4eekoPx4ndlW7s6vxkzlnHIfjgI0Y0TLYL3/f+15DdlXfduqai17GHT58t3yrhO7
<br>
GnskQVYrQ7Rje2MzmQ/bfmEBZjGRFYFbwnceCnkXxG1P42aBqLF0GLuuHhKAbsEm
<br>
IGnfkXlvhmlTsG3i4+ZDaVRku6QzsChpp1hjAkF+slZJ3IogTq5Dgym3kbnQXrYE
<br>
2Jjqrri3Stw7xWRheVFF4JlMtgii3HzSCMGcsdON9WpGvDRvOu+wwPNxBWXUtGE=
<br>
=uJQV
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>