<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Against this backdrop, even a bump SSL security seems a masterpiece.<br>
<br>
<br>
24.08.2016 18:32, Antony Stone пишет:<br>
<span style="white-space: pre;">> On Wednesday 24 August 2016 at
14:26:48, Yuri Voinov wrote:<br>
><br>
>> 24.08.2016 18:23, Antony Stone пишет:<br>
>>> On Wednesday 24 August 2016 at 14:18:46, Yuri Voinov
wrote:<br>
>>>> No one CA do not issue signing CA for subject,
which is not CA itself.<br>
>>>><br>
>>>> So, op wants impossible thing.<br>
>>><br>
>>> Why would one need a signING certificate just to
create an SSL connection<br>
>>> between the browser and Squid?<br>
>>><br>
>>> Surely one merely needs a valid signED certificate,
same as you would<br>
>>> put on a web server to set up secure connections to
it?<br>
>>><br>
>>> OP is not intercepting secure traffic, nor making
HTTP sites look to<br>
>>> the browser like HTTPS ones.<br>
>><br>
>> Then I do not understand what he wants op.<br>
><br>
> He wants to configure his browser to connect to the proxy
over an SSL <br>
> connection, and then inside this secure connection send
standard HTTP and <br>
> HTTPS requests, just as a browser would do over an unsecured
connection to the <br>
> proxy on Squid's standard port 3128.<br>
><br>
> It's nothing to do with whether either the client or the
destination server <br>
> believe the web content itself to be secured with SSL/TLS.<br>
><br>
> See "Encrypted browser-Squid connection" at the bottom of<br>
> <a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/Features/HTTPS">http://wiki.squid-cache.org/Features/HTTPS</a><br>
><br>
><br>
> Antony.<br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXvZT/AAoJENNXIZxhPexG2NQH/3zgESU+lH6DAOGxvB/9IPUa
<br>
P9OUKg4Ss9sRj8l1zUhAxy1Gf5A9vbX0qxUKF7KhhwsmUU1BSG+F2ocbouG4YGwJ
<br>
VNeyPSLhsQ9AF83OZEaaov4cra9YuYSk7pGxm4SdafTYDyPU96UCcj5MwEQfRzjq
<br>
TgB7GVrhGQ7TalEjGKGW8qP6nI1apriEkKXNCbEvm6Q3tpIjp72cx/LuQv/pu03x
<br>
BOFpZoUxzn61a2JUV4+lUcz6lmeji3kcTSWhuMBgE+W8klqxRYGOtVTGwNLv08N2
<br>
v1HYYI05BrCtqVYaPXAfKNxgqzBIS8X7fFSf14JrnpsF0W6d994g5La3EnOpZ/4=
<br>
=kNOJ
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>