Install and Configure Squid Proxy with SSL-Bump on Ubuntu 20.04 LTS

It’s well known that Squid cannot handle HTTPS but as more websites are using HTTPS, Squid being a very popular cache server sure have something to support it and quick search in Google, points to SSL-Bump. But sadly i can’t find a proper setup guide. There are just so many different guides out there and most don’t even work or work based on some dated version. Official documentation from Squid is also weird with settings that may not work. Anyway i just want to provide you readers with a basic setup so that you can focus on the configuration rather that figuring out how to install this. Trust me this is not fun at all.

First of all, if you install Squid using any of the package manager e.g. apt-get, it will not install the SSL-Bump feature. You can check your Squid setup to see if this is enabled by running the following command:

squid -v

And you should see ‘ — with-openssl’ and ‘ — enable-ssl-crtd’ in the output.

How to enable SSL-Bump?

Sadly, you will need to download the source from squid-cache.org and compile with the ‘— enable-ssl’ switch. This is not a fun process as it will take a while to ‘make’ and ‘make install’ and you may run into errors. Luckily for you readers, i’ve done all the hard work and you…