Hey Nicolas,

You can use a "splash page" concept which will contain a test page that will 
try to verify if the client has the root ca certificate installed.
I have created and published an example at:
https://github.com/elico/ca-cert-test-page

And a real usage at:
https://cert.rimon.net.il/

If the client will first try to access an http site it will work but if the 
client will try https site it will not work but once the client will get pass 
the error page he will be able to get instructions on how and what to install.

Will it work for your environment?

Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il


-----Original Message-----
From: squid-users <squid-users-boun...@lists.squid-cache.org> On Behalf Of 
Nicolas Kovacs
Sent: Friday, March 16, 2018 12:37
To: squid-users@lists.squid-cache.org
Subject: [squid-users] How to configure a "proxy home" page ?

Hi,

I have Squid + SquidGuard + SquidAnalyzer running on my LAN server as a
transparent cache + filtering proxy, and it's working real nicely.

When a client in my company wants to connect to the wifi, all he or she
has to do is this:

1. Connect to http://nestor.microlinux.lan

2. Download the nestor.microlinux.lan.der certificate

3. Install the certificate in the web browser (Firefox does it
automatically)

4. Surf the web

Now I wonder if there is a way to configure this page as a "proxy home
page" of some sorts. User who don't have the certificate installed
normally get a big fat HTTPS error as soon as they connect to a secure
site. So what I'd like to do is redirect "new" traffic to
http://nestor.microlinux.lan, which also explains what is happening.

I don't really know how to go about that, or if it is even possible.
Maybe some basic form of authentication ?

Any suggestion ?

Cheers,

Niki
-- 
Microlinux - Solutions informatiques durables
7, place de l'église - 30730 Montpezat
Site : https://www.microlinux.fr
Blog : https://blog.microlinux.fr
Mail : i...@microlinux.fr
Tél. : 04 66 63 10 32
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to