[squid-users] FATAL: The ssl_crtd helpers are crashing too rapidly, need help!

Yuri Voinov yvoinov at gmail.com
Fri Jan 30 20:37:10 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
The point following.

OpenSSL itself contains CAs derived from Mozilla bundle.

This CA bundle is NOT complete and NOT contains most intermediate
certificates.

I was forced to find and install over 40 CA's.

In particular, Symantec intermediate and root CA is completely absent in
Mozilla bundle, and, following, in OpenSSL.

So, you can't bump Symantec updates and some Twitter services (yes, it
protected by Symantec CA's) without it.

Also, some CA chains will not work if your don't add some certs.

Finally - finding and install required CA's is your responsibility. The
bump can't performing well without most used CA's.

31.01.2015 2:16, HackXBack пишет:
> Dear Amos ,
> please answer me because crashing increased , now it happen every hour, so
> every hour i need to delete old ssl db and create new one then restart
squid
> to make it works !!
> how i can tune this issue to solve it i need you in this bug,
> Thanks Mate.
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/FATAL-The-ssl-crtd-helpers-are-crashing-too-rapidly-need-help-tp4669257p4669447.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBAgAGBQJUy+t2AAoJENNXIZxhPexG478H/AwdEGaqkowsjoN7q2ffe9Sp
HFc+oYiP9aJx2O9V2AB0+hkB+Lk/s9x2K2pVo+i8NhtWnUbJlvqqNoAeNvFfFCw1
UgYbNxqaVPxHCluYbPWCNCF3KhC7mP1fwGmluEtVjymNWqN5bKJABN/30CFjAJk9
Xkke6TwMbFT8akfSgJ+kZeiBLEl40TjLGrAfn5ul8UYrUCSyRjZ4LMXkqyqmWYBL
yc8pY5WPngnRkKsnHJ/olgLe4e8Q3S6EHtzULg59s7+jsPm4r2XS2SbMOLF6wfKM
vJi/yzB3v7Ks/JcC+PI7FyvKccpU4Urriv32+SXtQTk+aQkKsWQFc9yO/a46QU0=
=jyl+
-----END PGP SIGNATURE-----



More information about the squid-users mailing list