Re: [squid-users] Using client certificate for all connection

2017-04-07 Thread Juande
Hi Amos, thanks for answering. Im using Squid 3.5.12 I tried using the line: sslproxy_client_certificate /home/ubuntu/Documents/cert.pem The pem was generated from .pfx using, openssl pkcs12 -in cert.pfx -out cert.pem -nodes So it should contain the private key. But my server still asking

Re: [squid-users] Using client certificate for all connection

2017-04-03 Thread Amos Jeffries
On 4/04/2017 3:06 a.m., Matus UHLAR - fantomas wrote: >>> IE I want the only the users which their certificates are in a file >>> will be able to use the proxy? >>> The other side is that squid as a client will posses and use a client >>> side certificate. >>> Which of the above is possible on late

Re: [squid-users] Using client certificate for all connection

2017-04-03 Thread Alex Rousskov
On 04/03/2017 09:06 AM, Matus UHLAR - fantomas wrote: > iirs this was not supported by browsers, does any support ssl-proxy > connections? Yes, IIRC, FireFox and Chrome (at least) support SSL connections to proxies, but configuration of that feature is "hidden". You should be able to find several

Re: [squid-users] Using client certificate for all connection

2017-04-03 Thread Matus UHLAR - fantomas
IE I want the only the users which their certificates are in a file will be able to use the proxy? The other side is that squid as a client will posses and use a client side certificate. Which of the above is possible on latest stable(3.5)? On 04.04.17 03:03, Amos Jeffries wrote: Same things

Re: [squid-users] Using client certificate for all connection

2017-04-03 Thread Amos Jeffries
On 2/04/2017 8:59 p.m., Eliezer Croitoru wrote: > For Incoming and outgoing connections? Yes. > IE I want the only the users which their certificates are in a file will be > able to use the proxy? > The other side is that squid as a client will posses and use a client side > certificate. > Whi

Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Eliezer Croitoru
-cache.org Subject: Re: [squid-users] Using client certificate for all connection On 31/03/2017 2:55 p.m., Eliezer Croitoru wrote: > As far my understanding goes squid doesn't have this function yet. > Maybe if you will put haproxy(not sure) infront of squid you might be able to > ach

Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Amos Jeffries
On 31/03/2017 9:39 p.m., Juande wrote: > Half and half. I need a way to client certificate authorize the requests from > my analyzer software that does not support certificate authentication, but > does support using a proxy. > > So I need that squid provides the certificate for all requests to a

Re: [squid-users] Using client certificate for all connection

2017-04-02 Thread Amos Jeffries
On 31/03/2017 2:55 p.m., Eliezer Croitoru wrote: > As far my understanding goes squid doesn't have this function yet. > Maybe if you will put haproxy(not sure) infront of squid you might be able to > achieve your goal. > It depends on exactly what is wanted as to how they are configured. But Sq

Re: [squid-users] Using client certificate for all connection

2017-03-31 Thread Juande
Half and half. I need a way to client certificate authorize the requests from my analyzer software that does not support certificate authentication, but does support using a proxy. So I need that squid provides the certificate for all requests to all servers. We have testing certificates that wor

Re: [squid-users] Using client certificate for all connection

2017-03-30 Thread Eliezer Croitoru
As far my understanding goes squid doesn't have this function yet. Maybe if you will put haproxy(not sure) infront of squid you might be able to achieve your goal. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Messag

Re: [squid-users] Using client certificate for all connection

2017-03-30 Thread Antony Stone
On Thursday 30 March 2017 at 18:55:09, Juande wrote: > Hi > > I want to configure squid so every request through the proxy get client > certificate authenticated. > > I need some automatic software audit tools to access to a server that uses > client certificates to access to its contents. Are