[squid-users] squid HTTPs as reverse proxy problem

Amos Jeffries squid3 at treenet.co.nz
Tue Apr 21 04:15:13 UTC 2015


On 21/04/2015 1:17 p.m., snakeeyes wrote:
> Thankx , I will tell u wt I did so far abd hope u help me in the directive squid needed :
> 


Squid does not perform SNI based certificate selection for HTTPS
virtual-hosting. You need an IP address for every top level domain being
served, sub-domains can use wildcard certificates.

<http://wiki.squid-cache.org/ConfigExamples/Reverse/SslWithWildcardCertifiate>


For use of self-signed certificates in https:// reverse-proxy it is
worth ensuring that you have DNSSEC and TLS DANE configured in the
website DNS records.

Amos


More information about the squid-users mailing list