<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div dir="ltr" id="yui_3_16_0_ym19_1_1493832295116_5324">I should clarify things a bit. I do realize SSH and squid are separate, but the problem I'm having is I cannot SSH into my home server from an organization that is apparently blocking SSH connections, for whatever reason, intentional or not. I am, however, able to use a squid proxy that I run from my home server. So the plan was to use SSH through the proxy. VPNs are out of the question as this does not work.<span></span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1493832295116_5324"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1493832295116_5324">I would only need to use my proxy from the desktop, so mobile is not required. </div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1493832295116_5310"><br><br></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1493832295116_5310" dir="ltr"><span style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5557">>Squid v3.5 supports secure connections to the proxy. See "TLS / SSL</span><br clear="none" style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5558"><span style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5559">>Options" for the http_port directive (not the https_port directive!).</span><br clear="none" style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5560"></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1493832295116_5310" dir="ltr"><span style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;"><br></span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1493832295116_5310" dir="ltr"><span style="font-family: HelveticaNeue, "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5729"><span style="font-family: "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 13px;" id="yui_3_16_0_ym19_1_1493832295116_5732">This is helpful since I was trying to use https_port.</span></span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1493832295116_5310"><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1493832295116_5316" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;" id="yui_3_16_0_ym19_1_1493832295116_5315"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1493832295116_5314"> <div dir="ltr" id="yui_3_16_0_ym19_1_1493832295116_5313"> <font size="2" face="Arial" id="yui_3_16_0_ym19_1_1493832295116_5312"> <hr size="1" id="yui_3_16_0_ym19_1_1493832295116_5311"> <b><span style="font-weight:bold;">From:</span></b> Alex Rousskov <rousskov@measurement-factory.com><br> <b><span style="font-weight: bold;">To:</span></b> "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> <br><b><span style="font-weight: bold;">Cc:</span></b> j m <acctforjunk@yahoo.com><br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, May 3, 2017 12:22 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [squid-users] HTTPS support<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1493832295116_5524"><br><div dir="ltr" id="yui_3_16_0_ym19_1_1493832295116_5523">On 05/03/2017 10:57 AM, j m wrote:<br clear="none">> I wanted to set up a proxy on my home server for use from remote<br clear="none">> locations to use as a web proxy (of course) and also to run SSH over.<br clear="none"><br clear="none">The "ssh" part is unrelated to Squid. Secure ssh separately from Squid.<br clear="none"><br clear="none"><br clear="none">> This means that basic auth is undesirable due to the login being sent<br clear="none">> in clear text. So, someone suggested digest auth, and I was happy.<br clear="none">> But, now I'm finding that PuTTY and WinSCP do not support digest auth.<br clear="none">> And consequently, I haven't found any other SSH clients that support<br clear="none">> digest. (sigh)<br clear="none"><br clear="none">These problems will go away if you stop mixing Squid and ssh. Squid is<br clear="none">HTTP while PuTTY/WinSCP is SSH. You gain very little by trying to use<br clear="none">the same authentication mechanism for both protocols in your use case.<br clear="none"><br clear="none"><br clear="none">> So, I'm back to plan b, and that is to have a secure proxy connection so<br clear="none">> all browser-to-server communication is encrypted.<br clear="none"><br clear="none">That is a good idea if all of your browsers support it. Popular browsers<br clear="none">support HTTPS-to-proxy on desktop, but I am not sure about their mobile<br clear="none">versions. You may have to jump through some hoops.<div class="yqt8784863774" id="yqtfd56138"><br clear="none"><br clear="none"><br clear="none">> So the question is, does<br clear="none">> anyone know if squid 3.5 on Ubuntu 16.04 supports secure connections?</div><br clear="none"><br clear="none">Squid v3.5 supports secure connections to the proxy. See "TLS / SSL<br clear="none">Options" for the http_port directive (not the https_port directive!).<br clear="none" id="yui_3_16_0_ym19_1_1493832295116_5549"><br clear="none">You can install Squid v3.5 on Ubuntu. I do not know whether the official<br clear="none">Ubuntu Squid package is built with the required support.<br clear="none"><br clear="none"><br clear="none">HTH,<br clear="none"><br clear="none">Alex.<div class="yqt8784863774" id="yqtfd11251"><br clear="none"><br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>