Re: [us...@httpd] man-in-the-middle https proxy

2009-06-16 Thread dummy
Hi Nick, thanks for pointing me to TLS/SNI patch which I found in 2.2.12dev working, but this needs a TLS/SNI enabled browser also. We are using IE6 on Windows XP :( My next issue on realising a https proxy would be that that mod_proxy_connect gets the server-name in the request of CONNECT www.

Re: [us...@httpd] man-in-the-middle https proxy

2009-06-13 Thread Nick Kew
On Sat, 13 Jun 2009 17:41:44 +0200 du...@habmalnefrage.de wrote: > Since mod_ssl has only the ability to host only one SSL hostname That's no longer true in trunk or 2.3.x releases. Grab mod_ssl from one of them. Alternatively, check the changelog for where SNI was introduced, and follow it bac

[us...@httpd] man-in-the-middle https proxy

2009-06-13 Thread dummy
Hi all, I have a Apache2 + mod_ssl + havp + squid as a transparent HTTPS-Proxy with virus scanner deployed. Since mod_ssl has only the ability to host only one SSL hostname based certificate per IP I'm looking for a solution to host multiply hostnames with dynamically generated certificates ba