ACE SSL initiation via Proxy server (squid)

[rjuchta]

Hi,

is it possible to configure ACE with SSL initiation if the connection goes via http/https proxy (squid) ?

I mean local host is requesting http://xyz.com, ACE doing SSL and requesting https://xyz.com, not directly but via http/https proxy server (squid).

Thanks

[Kanwaljeet Singh]

Hi Ryszard,

Yes, ACE can initiate SSL traffic and maintain SSL connection. So in SSL initiation ACE will act as a CLIENT receiving clear text HTTP traffic at the front end and sending traffic encrypted over the backend.

For more details please visit the below link and let me know if you have any questions.

http://www.cisco.com/c/en/us/td/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/ssl/guide/sslgd/initiate.html#wp1010343

Regards,

Kanwal

[rjuchta]

Hi Kanwal,

thanks, but the thing is not that simple if you go through proxy server, the point is that http tunnel should be opened first. I'm not sure if ACE is able to handle the tunnel and the ssl connection ... But maybe it can be done by a proper http header rewriting ...

regards