<div dir="ltr">Hi squid community,<div><br></div><div><div class="gmail-s-prose gmail-js-post-body" style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-family:-apple-system,system-ui,"Segoe UI Adjusted","Segoe UI","Liberation Sans",sans-serif;font-size:15px;vertical-align:baseline;box-sizing:inherit;width:659px;color:rgb(35,38,41)"><p style="margin-top:0px;margin-right:0px;margin-left:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both">We have a use case in which we need to do mutual TLS with an upstream server. Our internal services are using their own certificates, and we would like to use the SQUID proxy as a kind of gateway to which we send requests for the upstream server. The squid proxy will verify the incoming certificate and if correct, replace it by a certificate that is appropriate for the upstream server. I'm wondering whether this is possible with squid. I have been looking into ssl-bump of squid but couldn't get it working.</p><p style="margin:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both">Has anybody any experience with mutual authentication and squid ?</p><p style="margin:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both"><br></p><p style="margin:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both">Cheers,</p><p style="margin:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both">Mark</p></div><div class="gmail-mt24 gmail-mb12" style="margin-right:0px;margin-left:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;line-height:inherit;font-family:-apple-system,system-ui,"Segoe UI Adjusted","Segoe UI","Liberation Sans",sans-serif;font-size:13px;vertical-align:baseline;box-sizing:inherit;color:rgb(35,38,41)"><div class="gmail-post-taglist gmail-d-flex gmail-gs4 gmail-gsy gmail-fd-column" style="margin-right:0px;margin-bottom:10px;margin-left:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;clear:both;display:flex"><div class="gmail-d-flex gmail-ps-relative gmail-fw-wrap" style="margin-right:0px;margin-left:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;display:flex"><br class="gmail-Apple-interchange-newline"></div><div class="gmail-d-flex gmail-ps-relative gmail-fw-wrap" style="margin-right:0px;margin-left:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline;box-sizing:inherit;display:flex"><br></div></div></div></div></div>