Squid proxy with ssl bump
Generate your own certificates and put it in
./certs/CA_crt.pem./certs/CA_key.pem
OR
Generate self signed certificates
make certIntermediate certificates are placed in certs/intermediate. Add as necessary
make build PWD=$(pwd) REPO=<your-repo>The ./config/whitelist has the allowed list of domains. Make changes as necessary.
Or, make your own
make push REPO=<your-repo>Run Makefile
make testE.g. - Allowed
docker exec squid-proxy_client_1 /bin/bash -c "curl https://google.com"
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 220 100 220 0 0 286 0 --:--:-- --:--:-- --:--:-- 286
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="https://www.google.com/">here</A>.
</BODY></HTML>E.g - Denied
docker exec squid-proxy_client_1 /bin/bash -c "curl https://facebook.com"
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (35) Unknown SSL protocol error in connection to facebook.com:443 TLS code: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY