squid 反向代理怎么配置 ssl？

cache_effective_user squid
cache_effective_group squid
tcp_recv_bufsize 65535 bytes
icp_port 0
visible_hostname CDN
http_port 80 accel vhost vport
cache_peer 180.97.33.107 parent 80 0 no-query originserver name=wwwbaiducom
cache_peer_domain wwwbaiducom www.baidu.com

#acl
http_access allow all

acl AdminBoxes src 127.0.0.1
acl Purge method PURGE
http_access allow AdminBoxes Purge
http_access deny Purge

###cache,dir
#cache_log /home/squid/cache.log
#access_log /home/squid/access.log squid

cache_access_log none
cache_store_log none

cache_dir ufs /home/squid/cache 2048 32 128
maximum_object_size 1024 KB
maximum_object_size_in_memory 1024 KB
cache_mem 128 MB
cache_mgr Email
cache_swap_low 80
cache_swap_high 90
ipcache_size 512
ipcache_low 90
ipcache_high 95
fqdncache_size 512

### timeout
connect_timeout 1 minute
peer_connect_timeout 30 seconds
request_timeout 2 minutes
persistent_request_timeout 30 seconds
hierarchy_stoplist cgi-bin ?

#refresh_pattern
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern -i \.jpg$ 43200 50% 86400
refresh_pattern -i \.png$ 43200 50% 86400
refresh_pattern -i \.css$ 43200 50% 86400
refresh_pattern -i \.js$ 43200 50% 86400
refresh_pattern -i \.xml$ 43200 50% 86400
refresh_pattern -i \.htm$ 7200 50% 43200
refresh_pattern -i \.html$ 7200 50% 43200
refresh_pattern . 0 20% 4320

#header
#via off
reply_header_access Via deny all
reply_header_access Server deny all
forwarded_for on
half_closed_clients off