Re: HTTPS pass through / SNI filtering

Hi;

Can you give me an idea from where to start in order to pass https
traffic unprocessed through squid or implement SNI filtering for
squid, that will be enough to start my project.

Thanks in advance..

On Mon, Jul 4, 2011 at 3:04 PM, Deniz Eren <deniz_at_denizeren.net> wrote:
> Hi;
>
> I'm planning to work on an acl which uses SNI. But I need to pass
> https traffic through squid without processing it. Because I'm not
> interested in filtering or seeing the content, SNI server_name info
> will be enough. But with squid it is not possible to pass https
> traffic without processing it. In my design I won't use proxy, the
> iptables rule below will redirect https traffic to squid:
>
> iptables -t nat -I PREROUTING -p tcp --dport 443 -j DNAT
> --to-destination 192.168.0.1:3128
>
> Can you give me ideas how to solve above problem? And also are you
> working on SNI filtering?
>
> Good day to you..
>
Received on Wed Jul 06 2011 - 06:34:16 MDT