Please provide GNUTLS support in squid

[Paul Boot]

Since squid3 does an excellent job in proxying and/or terminating HTTPS traffic it would be nice if the package by default would be compiled with ssl/tls support enabled.

See: https://www.banym.de/linux/build-squid-with-enable-ssl-on-debian or
http://www.d90.us/toolbox/2009/05/26/adding-ssl-support-to-squid-package-on-ubuntu/

This was tested this with Ubuntu 10.04.4 LTS \n \l

[Micah Gersten (micahg)]

This is impossible right now for license reasons. Please see the discussion in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=180886 for more information.

[Paul Boot (paulboot)]

This should then be fixed in this project
https://code.launchpad.net/~yadi/squid/crypto-ng ??

Kind regards,

Paul Boot.

On 8 January 2013 04:14, Micah Gersten <email address hidden>wrote:

> This is impossible right now for license reasons. Please see the
> discussion in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=180886
> for more information.
>
> ** Bug watch added: Debian Bug tracker #180886
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=180886
>
> ** Changed in: squid3 (Ubuntu)
> Status: New => Won't Fix
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1097032
>
> Title:
> Build squid3 with –enable-ssl option by default
>
> Status in “squid3” package in Ubuntu:
> Won't Fix
>
> Bug description:
> Since squid3 does an excellent job in proxying and/or terminating
> HTTPS traffic it would be nice if the package by default would be
> compiled with ssl/tls support enabled.
>
> See: https://www.banym.de/linux/build-squid-with-enable-ssl-on-debian or
>
> http://www.d90.us/toolbox/2009/05/26/adding-ssl-support-to-squid-package-on-ubuntu/
>
> This was tested this with Ubuntu 10.04.4 LTS \n \l
>
> To manage notifications about this bug go to:
>
> https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1097032/+subscriptions
>

[Micah Gersten (micahg)]

sounds about right

[Micah Gersten (micahg)]

I'm converting this to a wishlist request in line with the Debian bug.

[Gábor Lipták (gliptak)]

Is this also duplicate of https://bugs.launchpad.net/bugs/16669 ?

[Amos Jeffries (yadi)]

Upstream bug tracker for this is http://bugs.squid-cache.org/show_bug.cgi?id=2741. The (very basic) initial stages have been added to squid-3.5 which is now available in Debian repositories - and enabled. There is still a lot to be done though, so it may not be generally useful for a few versions.

[Amos Jeffries (yadi)]

Update: Squid-4 packages are now available from Debian experimental repository with basic GnuTLS support for reverse- or explicit- proxy use. These currently exclude SSL-Bump, TLS interception and related features. May require the latest Ubuntu or Debian as well.

[Amos Jeffries (yadi)]

squid v4 packages are now in Cosmic