5

And what about Chrome, Opera, and Safari? (IE can go pound sand)

Clarifying, I have the power to reconfigure Squid if necessary.

3 Answers 3

4

If you are asking if Squid can proxy SSL connections, then yes it can. It cannot cache SSL connections for obvious reasons.

If you are asking if you can do HTTP proxy (or caching) via a Squid proxy that requires HTTPS, then yes it can if you aren't doing transparent proxying. It is the same as using HTTP proxy URLs. Of course, Squid has to be set up for caching via SSL.

This is useful if you run a cyber-cafe or open Wi-Fi and don't want everyone's traffic to be visible to everyone else.

See the documentation for https_port: http://www.squid-cache.org/Doc/config/https_port/

Another way is to use Stunnel or something similar: Here is an example using Stunnel: http://www.jeffyestrumskas.com/index.php/how-to-setup-a-secure-web-proxy-using-ssl-encryption-squid-caching-proxy-and-pam-authentication/index.html

2

You can also use SSH tunnel.

ssh user@your-proxy-host -D 127.0.0.1:1080

Use 127.0.0.1:1080 as SOCKS5 proxy in Firefox.

You also can run any proxy (like squid) at your-proxy-host bound to 127.0.0.1 and use -L 127.0.0.1:3128:127.0.0.1:3128 option to forward it through the ssh.

For the latter you can also substitute ssh with socat or stunnel.

1

Firefox can't talk HTTPS to proxy yet ( bug https://bugzilla.mozilla.org/show_bug.cgi?id=378637)

Chrome can do that: http://www.chromium.org/developers/design-documents/secure-web-proxy

1
  • but its fixed, you can test it by activating hotspot and open any SSL site like paypal etc
    – Wasim A.
    Sep 10, 2013 at 19:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .