[squid-users] SSL Peek and Splice with SIP over TCP

[Amos Jeffries]

On 9/03/2016 6:53 p.m., Howard Kranther wrote:
> Hello, I am investigating the use of squid as a client side proxy to
> provide TLS 1.2 support for a VOIP application using SIP over TCP.The
> application would use TCP or TLS 1.0 to communicate with squid, which
> would bump either of those to TLS 1.2 to communicate with a phone
> system.The application uses a commercial SIP stack so adding an HTTP
> CONNECT message to the start of a SIP session and processing the
> response is problematic.

Squid is an HTTP proxy. CONNECT is the only way non-HTTP compatible
protocols can be delivered over HTTP.

You need to go looking for a SOCKS proxy.

Amos