<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
<br>
<br>
24.08.2016 18:32, Antony Stone пишет:<br>
<span style="white-space: pre;">> On Wednesday 24 August 2016 at
14:26:48, Yuri Voinov wrote:<br>
><br>
>> 24.08.2016 18:23, Antony Stone пишет:<br>
>>> On Wednesday 24 August 2016 at 14:18:46, Yuri Voinov
wrote:<br>
>>>> No one CA do not issue signing CA for subject,
which is not CA itself.<br>
>>>><br>
>>>> So, op wants impossible thing.<br>
>>><br>
>>> Why would one need a signING certificate just to
create an SSL connection<br>
>>> between the browser and Squid?<br>
>>><br>
>>> Surely one merely needs a valid signED certificate,
same as you would<br>
>>> put on a web server to set up secure connections to
it?<br>
>>><br>
>>> OP is not intercepting secure traffic, nor making
HTTP sites look to<br>
>>> the browser like HTTPS ones.<br>
>><br>
>> Then I do not understand what he wants op.<br>
><br>
> He wants to configure his browser to connect to the proxy
over an SSL <br>
> connection, and then inside this secure connection send
standard HTTP and <br>
> HTTPS requests, just as a browser would do over an unsecured
connection to the <br>
> proxy on Squid's standard port 3128.</span><br>
Yeah, I get it. It seems to me, is absolutely crazy and insecure
idea.<br>
<span style="white-space: pre;">><br>
><br>
> It's nothing to do with whether either the client or the
destination server <br>
> believe the web content itself to be secured with SSL/TLS.<br>
><br>
> See "Encrypted browser-Squid connection" at the bottom of<br>
> <a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/Features/HTTPS">http://wiki.squid-cache.org/Features/HTTPS</a><br>
><br>
><br>
> Antony.<br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXvZTTAAoJENNXIZxhPexG3n4H/0O+OLxWoxAIoVq4B2g33Ep0
<br>
Iz4JkLx542E4gQjCzhtO3Ikjxoh2VLwwkF/S6PZqNvmQg6dJ6sbZVSsUBtJa6h+6
<br>
dWCM6gEeH/xnO3B5krKw9t721fyMpQEmb2uKCLyDxpJHiJLGShifliFykfcZwJ+m
<br>
Vt7+bp1R4KWtYGfh/2QUyRwzReMqlEkuNIJ2/KHucuuEfMauOB/Gn42MsPQDxZKZ
<br>
I0eJmi4Eo8jzYKyC1ZLsZVPVqVSuMz152QYdhBuUb5AJo/DaWVuyEwmhP0MYmEbU
<br>
bSYzQh8FiKuTsrHKYoqqo6m7fLtbz2o5ouGP8kbq6l93E9JBsmBwSsR28Urzwyg=
<br>
=C3LP
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>