Comment 1 for bug 133880

Revision history for this message
Marc Tardif (cr3) wrote : Re: https should use the squid proxy rather than relying on firewall holes

A workaround is to have Squid proxy requests made on http://launchpad.net made to a local running instance of stunnel. First, add the following cache peer to the squid configuration:

  acl insecureLaunchpad dstdomain launchpad.net
  acl HTTP proto HTTP

  cache_peer localhost parent 3129 0 no-query
  cache_peer_access localhost allow insecureLaunchpad
  cache_peer_access localhost deny !insecureLaunchpad
  never_direct deny HTTP insecureLaunchpad

Second, run stunnel to redirect http requests from localhost:3129 to https on launchpad.net:443:

  stunnel -c -d localhost:3129 -r launchpad.net:443

Enjoy!