Re: Using squid as an SSL/TLS endpoint/unwrapper for other protocols

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Tue, 08 May 2012 11:00:00 +0200

tis 2012-05-08 klockan 10:48 +0500 skrev Ahmed Talha Khan:

> I am interested in knowing how i can use squid as an SSL endpoint for
> protocols other then HTTPS.

Short answer, no. Squid is an HTTP proxy.

> The scenario is that i want to use its SSL
> handling capability and use it for some other protocol which is going
> inside SSL. This requires hooks into the squid code-base. I assume
> that the design being modular, will offer ssl handling layer with
> interfaces connecting it too the main Data Processing engine for HTTP.

Not really modular at that level.

> I want to tap into that interface and use the ssl layer output, which
> should be plain-traffic. Since SSL output is not protocol specific, i
> would be able to use it for any protocol that i want.

I think you are looking for stunnel which is a generic SSL wrapper for
any TCP protocol.

both Squid and stunnel uses OpenSSL for the SSL part.

Regards
Henrik
Received on Tue May 08 2012 - 09:00:06 MDT

This archive was generated by hypermail 2.2.0 : Tue May 08 2012 - 12:00:04 MDT