I-proxy ye-HTTPS kufanele futhi ithumele uchungechunge lwayo lwesitifiketi

Hlola izitifiketi zaphakathi ezingekho ku-TLS listener ukusuka kuklayenti kuya ku-Squid ngokwehlukile kusitifiketi sewebhusayithi oya kuyo.

Uma amaklayenti enqaba i-proxy ye-HTTPS ngaphambi kokufika kuwebhusayithi, hlola uchungechunge oluthunyelwa isilaleli se-proxy. Isitifiketi seqabunga esivumelekile sodwa kungenzeka singanikezi izitifiketi zaphakathi ezidingwa yiklayenti.

  1. Khomba indawo yokugcina ehlolwayo. Funda igama lomsingathi ku-URL ye-proxy emisiwe kanye nephutha lalokho kuxhumana. Isitifiketi sesilaleli kufanele sihlanganise lelo gama. Isitifiketi sewebhusayithi noma isitifiketi se-elinye igama le-IP angeke sithathe indawo yaso.
  2. Hlola ukumiswa kochungechunge kwesilaleli. Ukumiswa kwe-OpenSSL okusekelwa i-Squid kungafaka izitifiketi zaphakathi efayeleni lesitifiketi. Qinisekisa ukuhleleka kureferensi yesilaleli yenguqulo ye-Squid efakiwe kanye ne-TLS backend; ukuziphatha kwamaphakethe akufani. Isibonelo sesilaleli se-TLS se-Squid 6.13 sigcina ukuthembela kwesilaleli kuhlukile ku-TLS yendawo oya kuyo.
  3. Hlola ukuthembela kuklayenti ngokwehlukile. Ukuthumela izitifiketi zaphakathi kusiza ekwakheni uchungechunge, kodwa iklayenti lisadinga i-ankela yokuthembela yomsuka ehlosiwe. Ukungenisa lonke uchungechunge lweseva esitolo somsuka ngaphandle kokuhlukanisa kuwushintsho olwahlukile ekulungiseni lokho okuthunyelwa yiseva.

Shiya ukuqinisekisa kuvuliwe. Kukhomba i-proxy ye-HTTPS iklayenti ebelihlose ukuyisebenzisa. Ngemva kokuba lokho kuxhumana kuqinisekisiwe, iphutha lesitifiketi sewebhusayithi kamuva lingelokho kwesikhathi se-TLS sendawo oya kuyo ngokusebenzisa i-proxy, okunophenyo lwalo lwegama lomsingathi nokuthembela.

Izihloko ezihlobene