[squid-users] reverse-proxy with client certificates pass-thru

[Martin Fuchs]

Hi !

 

I'm looking for a possibility to tell squid to pass a certificate presented
by the client to a cache peer.

Since i did not find anything, i decided to ask here ;-)

I saw that it's possibe to let squid pass a client crtificate tot he cache
peer, but this would not work for out purposes.

 

It's an apple mobile device management system which needs to authenticate
the clients by their certificates.

Does anyone have apple remote profile-management running thru a
reverse-proxy with squid ?

 

This dirctive alone does not work:

cache_peer xx.xx.xx.xx parent 443 0 proxy-only no-query no-digest
originserver login=PASSTHRU ssl sslflags=DONT_VERIFY_PEER front-end-https=on
name=MDM_HOST_443

 

thanks in advance,

regards,

martin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150216/6105813a/attachment.html>