topic ACE SSL initiation via Proxy server (squid) in Application Networking

ACE SSL initiation via Proxy server (squid)

rjuchta — Fri, 28 Feb 2014 20:33:34 GMT

Hi,

is it possible to configure ACE with SSL initiation if the connection goes via http/https proxy (squid) ?

I mean local host is requesting http://xyz.com, ACE doing SSL and requesting https://xyz.com, not directly but via http/https proxy server (squid).

Thanks

ACE SSL initiation via Proxy server (squid)

Kanwaljeet Singh — Fri, 28 Feb 2014 22:00:37 GMT

Hi Ryszard,

Yes, ACE can initiate SSL traffic and maintain SSL connection. So in SSL initiation ACE will act as a CLIENT receiving clear text HTTP traffic at the front end and sending traffic encrypted over the backend.

For more details please visit the below link and let me know if you have any questions.

http://www.cisco.com/c/en/us/td/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/ssl/guide/sslgd/initiate.html#wp1010343

Regards,

Kanwal

ACE SSL initiation via Proxy server (squid)

rjuchta — Sun, 02 Mar 2014 18:26:19 GMT

Hi Kanwal,

thanks, but the thing is not that simple if you go through proxy server, the point is that http tunnel should be opened first. I'm not sure if ACE is able to handle the tunnel and the ssl connection ... But maybe it can be done by a proper http header rewriting ...

regards