Squid transparent proxy won't redirect SSL, Help please!

cereal83 · 08-15-2007, 07:59 AM

Hey all,

I am trying to set up a transparent firewall to block certain webpages on my lan. I have successfully been able to make the proxy work and it works great but when you go to a https website like https://www.gmail.com, the proxy is no longer working. I have read tons trying to figure it out but am in a pit so any help would be great.

Thanks

bathory · 08-15-2007, 08:40 AM

You cannot use transparent proxy for https requests because:

Quote:

SSL is specifically designed to prevent “man in the middle” attacks, and setting up squid in such a way would be the same as such a “man in the middle” attack. You might be able to successfully achive this, but not without breaking the encryption and certification that is the point behind SSL

cereal83 · 08-15-2007, 12:53 PM

Thank you very much for that update. I did not realize that.

Thanks again