On Fri, 2004-12-10 at 09:12, Henrik Nordstrom wrote:
> On Thu, 2 Dec 2004, David Delamarre wrote:
> 
> > https_port 443
> 
> You need to at an absolute minimum specify the SSL server certificate 
> Squid should use while acceitping the SSL connection from the client.
> 
> > client ======>reverse squid=====>Server
> >            https                         https
> 
> Squid-2.5 without SSL update is not capable of initiating SSL connections, 
> only allowing you the following configuration
> 
> client == HTTPS ==> squid == HTTP ==> Server

/Dumb question.

So essentially this means that whatever's being transferred from the
client (via HTTPS), once it reaches the squid box, it will be sent
un-encrypted to the server?

can you verify is this is true.

client --> Banking App (https) -->SquidBox --> BANK-Server (https)

Between squidbox and bank-server, is the communication encrypted?
(CONNECT?)

> This is required if your 
> server require the use of client certificates etc as these can not be 
> proxied.

I believe all these are the requirements, if one were to run squid as a
surrograte proxy (in front) of a web-server (???)

--
Ow Mun Heng
Gentoo/Linux on D600 1.4Ghz 
Neuromancer 10:53:14 up 1:47, 5 users, 0.24, 0.29, 0.42 


Reply via email to