[squid-users] ssl-bump and accel

[Antony Stone]

On Tuesday 05 January 2016 at 20:30:06, Nir Krakowski wrote:

> how can you combine accel proxy with ssl-bump ?

Have you looked at http://www.squid-cache.org/Doc/config/http_port/ ?

You put the certificate (which would normally be on the web server) on the 
Squid server (because that's the machine terminating the request, as far as 
the client is concerned).

You can have the connection between Squid and the real web server be HTTP (if 
it's over a secure network) or HTTPS, as you wish.

If you don't own the certificate (and therefore can't put it, and it's 
corresponding private key, on the Squid server), then why are you doing 
accelerator mode?


Antony.

-- 
Most people have more than the average number of legs.

                                                   Please reply to the list;
                                                         please *don't* CC me.