[squid-users] squid HTTPs as reverse proxy problem
Amos Jeffries
squid3 at treenet.co.nz
Tue Apr 21 04:15:13 UTC 2015
On 21/04/2015 1:17 p.m., snakeeyes wrote:
> Thankx , I will tell u wt I did so far abd hope u help me in the directive squid needed :
>
Squid does not perform SNI based certificate selection for HTTPS
virtual-hosting. You need an IP address for every top level domain being
served, sub-domains can use wildcard certificates.
<http://wiki.squid-cache.org/ConfigExamples/Reverse/SslWithWildcardCertifiate>
For use of self-signed certificates in https:// reverse-proxy it is
worth ensuring that you have DNSSEC and TLS DANE configured in the
website DNS records.
Amos
More information about the squid-users
mailing list