Re: [squid-users] Re: Reverse Proxy SSL + Certificates

2004-12-13 Thread David Delamarre
Thanks Henrik 

you are right i tried reverse with ssl between client and reverse
proxy ans it is working but if i need a certificate to authenticate to
the backend servers is not working 
Have you another solution ?

Regards



On Mon, 13 Dec 2004 17:11:39 +0100 (CET), Henrik Nordstrom
[EMAIL PROTECTED] wrote:
 On Mon, 13 Dec 2004, Ow Mun Heng wrote:
 
  Right, exactly as I thought. hence, I presume, with the SSL update, then
  squid can actually use the generated server-side cert and encrypt the
  request to be forwareded to the backend server.
 
 Yes, but you still won't be able to use (browser) client certificates to
 authenticate to the backend servers.
 
 To use client certificate based authentication the end-user client must
 talk SSL directly to the server it is supposed to authenitcate to, not a
 surrogate inbetween.
 
  (hmm.. Now, I need to figure out if Fedora's RPMS are patched for
  SSL, not that I need it though)
 
 They are not patched with the SSL update, for good reasons.
 
 Regards
 Henrik



Re: [squid-users] RE: ip_wccp Compilation error on RH ES3

2004-12-06 Thread David Delamarre
Hello all

i already ask to help me for a special configuration of squid.



Clients==SQUID reverse proxy== SERVER
  HTTPS HTTPS

All the clients use a certificate. i already configure Squid to
recognize this certificate. It is working fine. But this certificate
must me forward to the server (via squid)because we use the user name
of this certificate in the server application .
Can you give me some advice ? i want squid totally transparent for
this certificate

Thank you for your Help

David


[squid-users] Re: Reverse Proxy SSL + Certificates

2004-12-02 Thread David Delamarre
Hello

i configured Squid as a reverse proxy for HTTP. all is ok. I tried
with https and it is not working. I compiled with the option
enable-ssL ,and  with this version of squid it is not working ... I
want squid be full transparent for certificate.

no idea ... if someone can help me please

Thanks


Re: [squid-users] Re: Reverse Proxy SSL + Certificates

2004-12-02 Thread David Delamarre
- squid version ?
- os/platform/version ?
- which errors are, seen , what was tried ?
- cache.log entries, e.d,
- and so on...
squid 2.5.7 + openssl last version
it is the first time i configure squid. I tried reverse http. it is working

i tried reverse https 
with this configurations 
https_port 443
httpd_accel_host  XXX
httpd_accel_port 443
httpd_accel_with_proxy on
httpd_accel_single_host off


 client ==reverse squid=Server
https https

with this configuration, squid not working. I checked the firewall
there is a connection between the client and squid and no connection
between squid and the server to protect. i want squid completly
transparent for ssl. (the certificate must be transfert to the server)

Thanks




On Thu, 2 Dec 200an4 10:27:38 +0100, Elsen Marc [EMAIL PROTECTED] wrote:
 
 
 
 
 
  Hello
 
  i configured Squid as a reverse proxy for HTTP. all is ok. I tried
  with https and it is not working. I compiled with the option
  enable-ssL ,and  with this version of squid it is not working ... I
  want squid be full transparent for certificate.
 
  no idea ... if someone can help me please
 
 'not working' is an awfull concept in the complex IT area of
 the past Millenium ages :
 
 Clarify  , items interesting :
 
- squid version ?
- os/platform/version ?
- which errors are, seen , what was tried ?
- cache.log entries, e.d,
- and so on...
 
 M.