search

sonertari / SSLproxy

Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
BSD 2-Clause "Simplified" License
385 stars 100 forks source link

configuration example for squid transparent #25

Open mvclaudianobj opened 3 years ago

mvclaudianobj commented 3 years ago

Hello, first of all I would like to thank you for this wonderful collaboration.

Could you give me an example of configuration for using sslproxy in conjunction with squid to manage the logs diamanically and transparently for https addresses?

Thank you very much in advance

Marcos Claudiano

sonertari commented 3 years ago

You can find an https proxyspec for E2Guardian in sslproxy.conf for UTMFW. You basically need a proxyspec like that, and use Squid as the listening program on port 8080 (you can change the port of course).

You also need to modify Squid so it supports the mode of operation required by SSLproxy. You can use the patches for squid in my OpenBSD port here. However, those patches modify the egress path not the ingress. I know that a user has already done that, perhaps s/he can comment here. (I don't use Squid on UTMFW anymore, E2Guardian is enough for my purposes.)