Re: [squid-users] How to inspect client certificate in ssl_bump

2015-10-23 Thread Alex Rousskov
al Message- > From: Alex Rousskov [mailto:rouss...@measurement-factory.com] > Sent: Thursday, October 22, 2015 3:41 PM > To: squid-users@lists.squid-cache.org > Cc: Leon > Subject: Re: [squid-users] How to inspect client certificate in ssl_bump > > On 10/22/2015 03:53 PM,

Re: [squid-users] How to inspect client certificate in ssl_bump

2015-10-22 Thread Alex Rousskov
On 10/22/2015 03:53 PM, Leon wrote: > I'm using Squid 3.5. What I'm going to do is setting up a forward proxy that > inspect TLS handshake between client and server then allow the connection > only when following two requirements are met: > > 1. The server address must be in our whitelist, an

[squid-users] How to inspect client certificate in ssl_bump

2015-10-22 Thread Leon
Hi, I'm using Squid 3.5. What I'm going to do is setting up a forward proxy that inspect TLS handshake between client and server then allow the connection only when following two requirements are met: 1. The server address must be in our whitelist, and the server must provide a correct server