[squid-users] SQUID3 HTTPs forward proxy and sha256/512 authentication

Yuri Voinov yvoinov at gmail.com
Tue Feb 3 20:18:43 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
http://wiki.squid-cache.org/Features/Authentication
http://wiki.squid-cache.org/ConfigExamples#Authentication

This one?

04.02.2015 2:06, Anton Radkevich пишет:
>
> Thanks for quick reply,
> We don't need ssl bumping, or isn't it possible to configure by
another way, without using ssl bumping?
>
> What's about authentication using modern hash algorithms sha256/512?
>
> Anton
>
> 03 февр. 2015 г. 22:58 пользователь "Yuri Voinov" <yvoinov at gmail.com
<mailto:yvoinov at gmail.com>> написал:
>
>
> http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit
>
> 04.02.2015 1:03, Anton Radkevich пишет:
>
> > Hi everyone,
>
> > Could you please help me with configuration Squid3 as forward HTTPs
proxy?
>
> > Is it possible to configure it in such way?
>
> > What we do need is a fully encrypted HTTPS forward proxy that can
handle HTTP or HTTPS connection AND uses authentication.
>
> > so just to be clear the connection flow will look like:
>
> > browser <Encrypted Tunnel> Server <HTTP or HTTPS connection> Destination
>
> > where <Encrypted Tunnel> is probably some form of HTTPS connection
for support with the browser PAC
>
> > Also, for client auth, can we used more "modern" hashing algorithms
like sha256/512? md5 is old and collision prone at this point.
>
> > Thank you in advance!
>
>
>
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
> > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>     _______________________________________________
>     squid-users mailing list
>     squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>     http://lists.squid-cache.org/listinfo/squid-users
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBAgAGBQJU0S0jAAoJENNXIZxhPexGWT4H/3pQ408tRavvV1mQeO9GQ4r+
0n5JIKyE8EMJLQ4OP0CSV0o5usnMKOiPOnK6AYDDKKin4QF85kBfS4QZyzzuvxPj
YCgi/zzijEvlEjsXX6ekwz1Qt+ImrhhvBXWSUqigf9WCe/cbrbOYFCLd0QuC/PbC
lYpMyeE0VGzFZaYeKOetTkBGsphYJyHTTDuzFiZkagLfCaWbpELQNAsMyoESR/2e
/LXFFXVB33mO6AVg3nNIv/34mCbpEKEqZUBht0O+7xMnEEYwSMAiELBdY+Tv/WTQ
ejNGPqzuKndaG8Al+FN8P+pqNqdJT1xVOLcyXohOj0KwBSWgl5YOybpKwbTbnh4=
=0F5M
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150204/02fae119/attachment-0001.html>


More information about the squid-users mailing list