Re: SSL

Steven Sporen wrote:
>
> Hi,
>
> We run squid all over our internal network to improve performance in general.
>
> The children caches all connect through a parent cache which then
> connects through to the internet. I've got a problem where the clients who
> use the children caches can't connect to SSL sites. I presume this is
> because the cache servers will try and directly connect to the secure site.
> Is there any way around this? How can I force the child caches to go
> through the parent cache when fetching secure pages.

We had the same problem here until I upgraded to the v2.x
versions of Squid.
Now, using the Squid V2.1 (P1) and a "never-direct" directive
for the child caches, the SSL-requests are passed through to
the parent caches.

This setup works for many SSL sites, except those, that use
Java-scripts to make a direct connection to the client - which
is denied by our firewall.

                Robin

-- 
   _________________________________________________________________
  /                                                                 \
  |   Robin Breyl               Geno RZ                             |
  |  -------------                                                  |
  |                             Saonestrasse 3a                     |
  |                             60528 Frankfurt am Main             |
  |                                                                 |
  |   E-Mail (Office):          robin.breyl@gis-online.de           |
  |   E-Mail (Home):                  robin@breyl.de                |   
  |                                                                 |
  |   Tel.: +49 69 / 75690-369  Fax.: +49 69 / 75690-925            |
  \_________________________________________________________________/