[squid-users] Mutual TLS for the upstream example

[Sergey Maslyakov]

Folks,

Is the CONNECT tunnel designed in a way that enables it to "enrich" the
outgoing connection with mTLS authentication? "tls_outgoing_options" does
not seem to work the way I was hoping it does.

My destination server requires mTLS authentication of the client. I have a
valid key-cert pair and I can successfully execute a "curl" command to
fetch a document from that server using the key-cert pair at hand.

I want to put Squid between my clients (Maven, Gradle, Docker Engine, etc)
and the server so that clients would be configured to use the instance of
Squid as an HTTPS proxy but would not have to be configured with the mTLS
key-cert pair.

Here is how I see it:

Maven --- (HTTPS/CONNECT) ---> Squid (stores my mTLS key-cert pair) ---
(mTLS/SSL) ---> Server

Is this doable within Squid architecture?

I got it working using NGINX with some minor hiccups and I was hoping I can
do it more elegantly with Squid.


Thank you,
/Sergey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20210114/5f99857d/attachment.htm>