Re: [squid-users] Squid proxy server - Client certificate (reverse proxy)

On 28/01/11 07:48, Qvalpro Solutions wrote:
> Hi Folks,
>
> I just started exploring Squid proxy and I am clueless of how to use
> Squid in my setup.
>
> Some background on why I am trying to use the Squid proxy:
> I have a billing application installed in a windows server. This
> particular billing application uses some proprietary file system,
> which cannot be customized. I have purchased a Payway API account
> (Payway API is nothing but a payment processing system for credit
> cards) for using with the billing application. I just noticed that the
> Payway API needs a digital certificate to be installed for processing
> the payments. Unfortunately, my billing application doesn't allow any
> certificate installation. When I spoke to the billing application
> development company and Payway, they suggested me to use the Squid
> proxy to workaround the problem. I was also told that the Squid proxy
> can provide the client certificate.
>
> As I don't have adequate exposure to setting up proxy servers, I have
> the following questions:
> 1. Can I install the Squid proxy in the same server where my billing
> application is located?

Yes.

Additional problem though: Windows Squid builds only have experimental
SSL support and are limited to squid-2.7 for now.

If you need to do this for Windows please contact Guido at Acme
Consulting (http://squid.acmeconsulting.it/) for support.

> 2. How do I connect the billing application to the Squid Proxy? Do I
> need to use some port for this and how am I supposed to connect the
> Squid Proxy to the Payway API?

You setup Squid as a reverse-proxy and make old billing application
believe Squid is the Payway system. Usually via DNS. Squid handles the
rest once requests are arriving nicely to it.

Start with this:
http://wiki.squid-cache.org/ConfigExamples/Reverse/BasicAccelerator
it covers the very simple config just to get an accelerator working.
Stuff like SSL require additional config.

> 3. How do I install the digital certificate provided by Payway in the
> Squid proxy and what format of digital certificate is to be used -
> .net or PHP or ASP or something else?

Squid uses .PEM format certificates.

After doing the setup from your question 2. You configure Squid to use
them with additional options on the cache_peer line.
Set the "ssl" flag to enable SSL on the link then any of the other ssl*=
options as needed by the Payway system.

http://www.squid-cache.org/Doc/config/cache_peer/

(snipped Q4-6 since they are answerd above as well).

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.10
   Beta testers wanted for 3.2.0.4