Re: [squid-users] SSL MITM with unencrypted parent proxy

2015-05-05 Thread Amos Jeffries
On 5/05/2015 11:19 p.m., Chris Bennett wrote: > Hi Amos, > > Thanks for the quick reply. > >> However, explicit proxies can receive TLS connections. The two proxies >> will happily use those connections for any type of traffic, including >> ones like https:// with special security requirements. >

Re: [squid-users] SSL MITM with unencrypted parent proxy

2015-05-05 Thread Chris Bennett
Hi Amos, Thanks for the quick reply. > However, explicit proxies can receive TLS connections. The two proxies > will happily use those connections for any type of traffic, including > ones like https:// with special security requirements. > > * Configure the squid2 with an https_port for receivi

Re: [squid-users] SSL MITM with unencrypted parent proxy

2015-05-04 Thread Amos Jeffries
On 5/05/2015 4:08 p.m., Chris Bennett wrote: > Hi there, > > I'm experimenting with WAN acceleration & block caching (wanproxy.org > for those interested). This works great for HTTP: > > client <-> squid1 <-> wanproxy <-> VPN <-> wanproxy <-> squid2 <-> inet > > With SSL, I suspect the data bet