Secure Squid HTTPS Proxy

kklouzal · Aug 21, 2019, 10:31 PM

Squid can be configured for clients to connect using SSL by configuring the https_port configuration directive in our squid.conf file: http://www.squid-cache.org/Doc/config/https_port/

Browsers have finally adopted connecting to a secure proxy server:
Chrome http://www.chromium.org/developers/design-documents/secure-web-proxy
Firefox https://bugzilla.mozilla.org/show_bug.cgi?id=378637
Edge (cause it uses chromium)
Safari supports secure proxy
I'm sure others do or, if not, will soon.

These browsers support automatically configuring connections to secure proxy servers with PAC files and WPAD:

function FindProxyForURL(url, host) { return "HTTPS secure-proxy.example.com:443"; }

How can we get the PfSense Squid Package be updated to show configuration options inside the web gui to setup a secure squid proxy server?

How can I add the necessary configuration changes to squid.conf to enable this feature on my own? A SSL Certificate must be supplied along with the https_port entry. The default generated web configurator certificate should suffice for this.

KOM · Aug 21, 2019, 10:51 PM

You can put in a feature request at Redmine for something like that, but don't expect it in the next dev build.

Netgate provides instructions for WPAD Autoconfigure for Squid.

kklouzal · Jan 23, 2022, 5:15 PM

Well I posted into redmine..
https://redmine.pfsense.org/issues/9700
Over 2 years ago..
Didn't expect it in the next dev build but yeah..Over 2 years..