Re: [squid-users] HTTPS support

2017-05-03 Thread j m
To: "Craddock, Tommy" Cc: "squid-users@lists.squid-cache.org" Sent: Wednesday, May 3, 2017 3:23 PM Subject: Re: [squid-users] HTTPS support Seems to me you are overthinking this. What you're up against is blocked outbound ports. Simply run openvpn at your home over

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
nwald To: "Craddock, Tommy" Cc: "squid-users@lists.squid-cache.org" Sent: Wednesday, May 3, 2017 3:23 PM Subject: Re: [squid-users] HTTPS support Seems to me you are overthinking this. What you're up against is blocked outbound ports. Simply run openvpn at your home over

Re: [squid-users] HTTPS support

2017-05-03 Thread Daniel Greenwald
uter to the HAProxy box. > > > Thanks! > > > > > > *From:* squid-users [mailto:squid-users-boun...@lists.squid-cache.org] *On > Behalf Of *j m > *Sent:* Wednesday, May 03, 2017 3:14 PM > > *To:* squid-users@lists.squid-cache.org > *Subject:* Re: [squid-users

Re: [squid-users] HTTPS support

2017-05-03 Thread Craddock, Tommy
: Wednesday, May 03, 2017 3:14 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] HTTPS support Looks interesting, but it looks complex and sounds like I'd need more of a router than I have to do it. From: "Craddock, Tommy" mai

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
Looks interesting, but it looks complex and sounds like I'd need more of a router than I have to do it. From: "Craddock, Tommy" To: "squid-users@lists.squid-cache.org" Sent: Wednesday, May 3, 2017 2:04 PM Subject: Re: [squid-users] HTTPS support #yiv

Re: [squid-users] HTTPS support

2017-05-03 Thread Craddock, Tommy
@lists.squid-cache.org Subject: Re: [squid-users] HTTPS support In any case, I'm finding SSH through proxy is undesirable or not possible. I'm thinking shellinabox, which is insecure but run over a secure proxy link, is my best bet. From: Alex Rousskov ma

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
017 1:19 PM Subject: Re: [squid-users] HTTPS support On 05/03/2017 11:37 AM, j m wrote: > the plan was to use SSH through the proxy. If your SSH clients support SSH through an HTTP proxy, then do not authenticate them in Squid. Just do not let them go anywhere but the SSH server. It would be

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
y FTP) proxy, not a general-purpose TCP proxy. This is the first I've been told this.  I personally don't know since I'm very proxy-illiterate.  From: Antony Stone To: squid-users@lists.squid-cache.org Sent: Wednesday, May 3, 2017 12:48 PM Subject: Re: [squid-users] HTTPS

Re: [squid-users] HTTPS support

2017-05-03 Thread Alex Rousskov
TTP-proxying SSH connections. Alex. > > *From:* Alex Rousskov > *To:* "squid-users@lists.squid-cache.org" > > *Cc:* j m > *Sent:* Wednesday, May 3, 2017 12:22 PM > *Subject:* Re: [squid-users] H

Re: [squid-users] HTTPS support

2017-05-03 Thread Antony Stone
On Wednesday 03 May 2017 at 18:37:36, j m wrote: > I cannot SSH into my home server from an organization that is apparently > blocking SSH connections, for whatever reason, intentional or not. I am, > however, able to use a squid proxy that I run from my home server. So, redirect *external* conn

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
Options" for the http_port directive (not the https_port directive!). This is helpful since I was trying to use https_port. From: Alex Rousskov To: "squid-users@lists.squid-cache.org" Cc: j m Sent: Wednesday, May 3, 2017 12:22 PM Subject: Re: [squid-users] HTTPS support On

Re: [squid-users] HTTPS support

2017-05-03 Thread Alex Rousskov
On 05/03/2017 10:57 AM, j m wrote: > I wanted to set up a proxy on my home server for use from remote > locations to use as a web proxy (of course) and also to run SSH over. The "ssh" part is unrelated to Squid. Secure ssh separately from Squid. > This means that basic auth is undesirable due to

[squid-users] HTTPS support

2017-05-03 Thread j m
I wanted to set up a proxy on my home server for use from remote locations to use as a web proxy (of course) and also to run SSH over.  This means that basic auth is undesirable due to the login being sent in clear text.  So, someone suggested digest auth, and I was happy.  But, now I'm finding