[squid-users] How to setup a secure(!) squid proxy

[Amos Jeffries]

On 14/01/2016 5:10 a.m., startrekfan wrote:
> It's a debian. But an ubuntu howto will also work with debian.
> Here is the broken link:
> 
> I combined this two instructions:
> http://wiki.squid-cache.org/Features/SslBump
> http://wiki.squid-cache.org/Features/DynamicSslCert
> 
> (The latest stable squid on ubuntu is 3.4)

Nope, the latest Squid on Ubuntu is 3.3. I'm still trying to locate who
to push along to get it back in sync with Debian.

The latest Squid on Debian is 3.5.12 and has undergone a renaming
transition differently from Ubuntu.


To build a useful package for Debian:

* Alter your apt sources.list to point at the stretch or testing
repository. (keep a backup)

* Run:
 + apt-get update
 + apt-get install squid-langpack libssl-dev
 + apt-get build-dep squid
 + apt-get --build source squid

* Replace apt sources.list with your original one

* Run apt-get update

* Edit the debian/rules file in the folder created to add your
--with-openssl rule amongst the other --* build options.

* Edit debian/changelog to alter the version number from "3.5.12-1" to
"3.5.12-1foo1"


* Run dpkg-buildpackage

* Run "dpkg --install ..." for the *foo1 squid-common and squid packages
produced.
 - listing them in that order for dpkg command line is important.

Squid should now be installed with OpenSSL support and all appropriate
Debian integration.

Amos