[squid-users] ssl_crtd initialization SSL db error

Ian Silvester iansilvester at fastmail.fm
Wed Oct 14 20:51:57 UTC 2015


Hi all,

I'm following the instructions on this page 
http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit
to set up Squid as an end-point for HTTPS communications, and am hitting 
an error when attempting to create and initialize an SSL certificates 
cache directory.

Having taken care to ensure that my chosen directory exists 
(/usr/local/var/cache/squid/ssl_db) and has the same ownership as the 
user which I'm using to execute ssl_crtd, I execute the following 
command from within squid's libexec directory:

./ssl_crtd -c -s /usr/local/var/cache/squid/ssl_db

This gives the following output:

Initialization SSL db...
./ssl_crtd: Cannot create /usr/local/var/cache/squid/ssl_db


All the mailing list searching I've done suggests that this is a 
permissions issue, but the folder is owned by me, has permissions 755, 
and I'm running ssl_crtd.

For what it's worth, I'm running v3.5.7 on OS X (via Homebrew) which was 
built with --enable-ssl --enable-ssl-crtd --disable-eui

Can anyone suggest what my issue might be? Does ssl_crtd internally run 
as an alternate user? I don't appear to have any user accounts dedicated 
to Squid.


All suggestions welcome,

Ian


-- 
My PGP public key 
<http://diem.serveftp.net:8080/IanSilvesterPGPPublicKey.asc>.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151014/4bf1d1f5/attachment-0001.html>


More information about the squid-users mailing list