让自己Squid兼具HTTPS 特性-详细教材

The default installation of Squid on Ubuntu 12.04 does not support SSL. To enable SSL, it must be recompiled. This guide will walk you through compiling Squid on Ubuntu 12.04 to add SSL support. Although we are targeting Ubuntu 12.04, this guide will also work on Ubuntu 14.

Compile Squid

Install dependencies.

cd ~ 
mkdir squid_src 
cd squid_src 
sudo apt-get install build-essential fakeroot devscripts gawk gcc-multilib dpatch 
sudo apt-get build-dep squid3 
sudo apt-get build-dep openssl 
sudo apt-get source squid3 
sudo apt-get install libssl-dev 
sudo apt-get install openssl 

Change the default compiler options to include SSL support.

vi squid3-3.1.19/debian/rules

... add these rules to "DEB_CONFIGURE_EXTRA_FLAGS":

DEB_CONFIGURE_EXTRA_FLAGS := --datadir=/usr/share/squid3 \ 
        --sysconfdir=/etc/squid3 \ 
        --mandir=/usr/share/man \ 
        --with-cppunit-basedir=/usr \ 
        --enable-inline \ 
        --enable-ssl \  

Compile.

cd squid3-3.1.19/ 
debuild -us -uc -b 

Install it. The compiled file exists in the squid_src directory.

cd .. 
sudo dpkg -i squid3_3.1.19-1ubuntu3.12.04.2_amd64.deb squid3-common_3.1.19-1ubuntu3.12.04.2_all.deb squid3-dbg_3.1.19-1ubuntu3.12.04.2_amd64.deb 

Test whether or not the compiled version supports SSL. If you see the “enable – SSL” output, then the compile was successful.

squid3 -v |grep enable-ssl

Configure SSL and start Squid

Generate a self-signed certificate.

openssl req -new -keyout key.pem -nodes -x509 -days 365 -out cert.pem 

Move the server certificate to the squid3 configuration directory.

sudo mv cert.pem /etc/squid3/cert.pem
sudo mv key.pem /etc/squid3/key.pem

Enable HTTPS and specify the certificate.

sudo vi /etc/squid3/squid.conf 

... add this line:

https_port 443 cert=/etc/squid3/cert.pem key=/etc/squid3/key.pem 

Verify that the configuration file is formatted properly.

squid3 -k parse 

Run the Squid service.

sudo service squid3 restart

Setup is complete. Squid 3 will now be working with HTTPS. Enjoy.

How do you tell if a string contains another string in Unix shell scripting?

# contains(string, substring)
#
# Returns 0 if the specified string contains the specified substring,
# otherwise returns 1.
contains() {
    string="$1"
    substring="$2"
    if test "${string#*$substring}" != "$string"
    then
        return 0    # $substring is in $string
    else
        return 1    # $substring is not in $string
    fi
}

contains "abcd" "e" || echo "abcd does not contain e"
contains "abcd" "ab" && echo "abcd contains ab"
contains "abcd" "bc" && echo "abcd contains bc"
contains "abcd" "cd" && echo "abcd contains cd"
contains "abcd" "abcd" && echo "abcd contains abcd"
contains "" "" && echo "empty string contains empty string"
contains "a" "" && echo "a contains empty string"
contains "" "a" || echo "empty string does not contain a"
contains "abcd efgh" "cd ef" && echo "abcd efgh contains cd ef"
contains "abcd efgh" " " && echo "abcd efgh contains a space"