Proxy HTTP to HTTPs?

Question

In contact with

I was puzzled by the following problem:
VKontakte still does not provide access via HTTPs, which is very bad, especially when using open Wi-Fi.
The idea is this:
1) There is a virtual server on Amazon AWS, it has a server Ubuntu 10.10 on it
2) Create a self-signed SSL certificate (setting exceptions in the browser is not a problem)
3) You need to do something so that requests to port 443 (HTTPs) are interpreted as a call to vkontakte.ru, but at the same time encryption was carried out on my server.
4) In HTML content, all links of the form " http://*.vkontakte.ru/* " should be replaced by " httpS://*.mydomain.com/* ", including in AJAX
5) And it's a joy to use contact via mydomain .com

How can this scheme be implemented? I tried to tame Squid, but it did not work ((
If you provide instructions, I will be very grateful))

Answer 1

Yes, you know a lot about perversions :)
M.b. make a VPN on a remote server, connect to it with the necessary encryption? Then there is no need to fence the garden, and this option has been tested more than one hundred times. Open WiFi in this case is not dangerous.

Answer 2

Hospadi.
SSH tunnel + privoxy (just do aptitude install privoxy and ssh the privoxy port to your machine) - and the problem is more than completely solved.
And drive all the traffic there on the 80th port. Or get a separate chrome/FF config with proxy enabled.

Answer 3

The guys from the Kebrum team are just asking for this question. Poshukayte on Habr, they wrote several articles. If it really worries you that much, their price will be quite normal (I am not affiliated in any way with Kebrum, this is not advertising, but advice).

Answer 4

On the PC, you need to register routes, which hosts to go to via VPN, and which ones directly. If you have Linux, then you can generally wrap all packets going to port 80 on the VPN.
IMHO VPN is the best solution.