<div dir="ltr"><div>Here are the outputs:<br></div><div><br>$ egrep '^(https?_port|ssl)' /etc/squid3/squid.conf<br></div><br>http_port 3128<br><div><br>---------------------------------------------------------------------------------------------------<br>$ /usr/sbin/squid3 -N<br><br>WARNING: Cannot write log file: /var/log/squid3/cache.log<br>/var/log/squid3/cache.log: Permission denied<br> messages will be sent to 'stderr'.<br>WARNING: Cannot write log file: /var/log/squid3/cache.log<br>/var/log/squid3/cache.log: Permission denied<br> messages will be sent to 'stderr'.<br>2014/11/10 13:30:29| WARNING: Closing open FD 2<br>2014/11/10 13:30:29| Starting Squid Cache version 3.3.8 for i686-pc-linux-gnu...<br>2014/11/10 13:30:29| Process ID 24524<br>2014/11/10 13:30:29| Process Roles: master worker<br>2014/11/10 13:30:29| With 65536 file descriptors available<br>2014/11/10 13:30:29| Initializing IP Cache...<br>2014/11/10 13:30:29| DNS Socket created at [::], FD 4<br>2014/11/10 13:30:29| DNS Socket created at 0.0.0.0, FD 5<br>2014/11/10 13:30:29| Adding nameserver 127.0.1.1 from /etc/resolv.conf<br>2014/11/10 13:30:29| Adding domain mynet from /etc/resolv.conf<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_ACCESS_DENIED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_ACCESS_DENIED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_CACHE_ACCESS_DENIED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_CACHE_ACCESS_DENIED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_CACHE_MGR_ACCESS_DENIED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_CACHE_MGR_ACCESS_DENIED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FORWARDING_DENIED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FORWARDING_DENIED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_NO_RELAY': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_NO_RELAY<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_CANNOT_FORWARD': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_CANNOT_FORWARD<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_READ_TIMEOUT': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_READ_TIMEOUT<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_LIFETIME_EXP': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_LIFETIME_EXP<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_READ_ERROR': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_READ_ERROR<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_WRITE_ERROR': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_WRITE_ERROR<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_CONNECT_FAIL': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_CONNECT_FAIL<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_SECURE_CONNECT_FAIL': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_SECURE_CONNECT_FAIL<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_SOCKET_FAILURE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_SOCKET_FAILURE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_DNS_FAIL': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_DNS_FAIL<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_URN_RESOLVE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_URN_RESOLVE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_ONLY_IF_CACHED_MISS': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_ONLY_IF_CACHED_MISS<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_TOO_BIG': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_TOO_BIG<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_INVALID_RESP': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_INVALID_RESP<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_UNSUP_HTTPVERSION': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_UNSUP_HTTPVERSION<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_INVALID_REQ': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_INVALID_REQ<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_UNSUP_REQ': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_UNSUP_REQ<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_INVALID_URL': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_INVALID_URL<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_ZERO_SIZE_OBJECT<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_PRECONDITION_FAILED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_PRECONDITION_FAILED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_CONFLICT_HOST': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_CONFLICT_HOST<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_DISABLED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_DISABLED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_UNAVAILABLE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_UNAVAILABLE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_FAILURE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_FAILURE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_PUT_ERROR': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_PUT_ERROR<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_NOT_FOUND': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_NOT_FOUND<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_FORBIDDEN': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_FORBIDDEN<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_PUT_CREATED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_PUT_CREATED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_FTP_PUT_MODIFIED': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_FTP_PUT_MODIFIED<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_ESI': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_ESI<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_ICAP_FAILURE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_ICAP_FAILURE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_GATEWAY_FAILURE': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_GATEWAY_FAILURE<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_DIR_LISTING': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_DIR_LISTING<br>2014/11/10 13:30:29| '/usr/share/squid3/errors/templates/ERR_SHUTTING_DOWN': (2) No such file or directory<br>2014/11/10 13:30:29| WARNING: failed to find or read error text file ERR_SHUTTING_DOWN<br>2014/11/10 13:30:29| Logfile: opening log daemon:/var/log/squid3/access.log<br>2014/11/10 13:30:29| Logfile Daemon: opening log /var/log/squid3/access.log<br>2014/11/10 13:30:29| WARNING: no_suid: setuid(0): (1) Operation not permitted<br>2014/11/10 13:30:29| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec<br>2014/11/10 13:30:29| Store logging disabled<br>2014/11/10 13:30:29| Swap maxSize 0 + 262144 KB, estimated 20164 objects<br>2014/11/10 13:30:29| Target number of buckets: 1008<br>2014/11/10 13:30:29| Using 8192 Store buckets<br>2014/11/10 13:30:29| Max Mem size: 262144 KB<br>2014/11/10 13:30:29| Max Swap size: 0 KB<br>2014/11/10 13:30:29| Using Least Load store dir selection<br>2014/11/10 13:30:29| chdir: /var/spool/squid3: (2) No such file or directory<br>2014/11/10 13:30:29| Current Directory is /home/myhome<br>fopen: Permission denied<br>2014/11/10 13:30:29| Loaded Icons.<br>2014/11/10 13:30:29| commBind: Cannot bind socket FD 8 to [::]:3128: (98) Address already in use<br>2014/11/10 13:30:29| HTCP Disabled.<br>2014/11/10 13:30:29| WARNING: no_suid: setuid(0): (1) Operation not permitted<br>2014/11/10 13:30:29| Pinger socket opened on FD 10<br>2014/11/10 13:30:29| /var/run/squid3.pid: (13) Permission denied<br>2014/11/10 13:30:29| WARNING: Could not write pid file<br>2014/11/10 13:30:29| Squid plugin modules loaded: 0<br>2014/11/10 13:30:29| Adaptation support is off.<br>2014/11/10 13:30:29| Closing HTTP port [::]:3128<br>2014/11/10 13:30:29| storeDirWriteCleanLogs: Starting...<br>2014/11/10 13:30:29| Finished. Wrote 0 entries.<br>2014/11/10 13:30:29| Took 0.00 seconds ( 0.00 entries/sec).<br>FATAL: Unable to open HTTP Socket<br>Squid Cache (Version 3.3.8): Terminated abnormally.<br>CPU Usage: 0.052 seconds = 0.048 user + 0.004 sys<br>Maximum Resident Size: 105920 KB<br>Page faults with physical i/o: 0<br>Memory usage for squid via mallinfo():<br> total space in arena: 15512 KB<br> Ordinary blocks: 15407 KB 4 blks<br> Small blocks: 0 KB 1 blks<br> Holding blocks: 27420 KB 8 blks<br> Free Small blocks: 0 KB<br> Free Ordinary blocks: 104 KB<br> Total in use: 42827 KB 276%<br> Total free: 104 KB 1%<br>2014/11/10 13:30:29| Closing Pinger socket on FD 10<br>myhome@firstcom:~$ 2014/11/10 13:30:29| pinger: Initialising ICMP pinger ...<br>2014/11/10 13:30:29| pinger: ICMP socket opened.<br>2014/11/10 13:30:29| pinger: ICMPv6 socket opened<br>2014/11/10 13:30:29| Pinger exiting.<br><br>---------------------------------------------------------------------------------------------------<br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 10, 2014 at 1:26 PM, Jason Haar <span dir="ltr"><<a href="mailto:Jason_Haar@trimble.com" target="_blank">Jason_Haar@trimble.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 10/11/14 23:43, Eliezer Croitoru wrote:<br>
> Can you send all ssl_bump related settings?<br>
> There are some missing parts in the settings.<br>
<br>
How's this?<br>
<br>
# egrep '^(https?_port|ssl)' /etc/squid/squid.conf<br>
http_port 3128<br>
http_port 3126 ssl-bump cert=/etc/squid/squid-CA.cert<br>
capath=/etc/ssl/certs/ generate-host-certificates=on<br>
dynamic_cert_mem_cache_size=256MB options=ALL<br>
http_port 3129 intercept<br>
https_port 3127 intercept ssl-bump cert=/etc/squid/squid-CA.cert<br>
capath=/etc/ssl/certs/ generate-host-certificates=on<br>
dynamic_cert_mem_cache_size=256MB options=ALL<br>
sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB<br>
sslcrtd_children 32 startup=5 idle=1<br>
ssl_bump server-first all<br>
<br>
<br>
This is a CentOS-6 64bit server with 8G RAM and two Ethernet cards - one<br>
internal and one external. iptables is used to redirect outbound tcp<br>
port 80/443 (on internal network) onto squid port 3129/3127<br>
respectively. I've removed the two ACLs I had and they haven't caused<br>
any change, so they are not related to the problem<br>
<br>
access.log does not show any entries (the crash occurs before they can<br>
write I guess) and the cache.log shows the following whenever I "telnet<br>
1.2.3.4 443" (I've appended the cache.log from the start, through the<br>
crash to the next start)<br>
<br>
2014/11/11 00:14:02 kid1| Starting Squid Cache version 3.4.9 for<br>
x86_64-redhat-linux-gnu...<br>
2014/11/11 00:14:02 kid1| Process ID 25288<br>
2014/11/11 00:14:02 kid1| Process Roles: worker<br>
2014/11/11 00:14:02 kid1| With 16384 file descriptors available<br>
2014/11/11 00:14:02 kid1| Initializing IP Cache...<br>
2014/11/11 00:14:02 kid1| DNS Socket created at 0.0.0.0, FD 7<br>
2014/11/11 00:14:02 kid1| Adding domain <a href="http://xx.org" target="_blank">xx.org</a> from /etc/resolv.conf<br>
2014/11/11 00:14:02 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf<br>
2014/11/11 00:14:02 kid1| helperOpenServers: Starting 5/32 'ssl_crtd'<br>
processes<br>
2014/11/11 00:14:02 kid1| helperOpenServers: Starting 5/20 'squidguard'<br>
processes<br>
2014/11/11 00:14:02 kid1| Logfile: opening log<br>
daemon:/var/log/squid/access.log<br>
2014/11/11 00:14:02 kid1| Logfile Daemon: opening log<br>
/var/log/squid/access.log<br>
2014/11/11 00:14:02 kid1| Unlinkd pipe opened on FD 33<br>
2014/11/11 00:14:02 kid1| Local cache digest enabled; rebuild/rewrite<br>
every 3600/3600 sec<br>
2014/11/11 00:14:02 kid1| Store logging disabled<br>
2014/11/11 00:14:02 kid1| Swap maxSize 1024000 + 524288 KB, estimated<br>
119099 objects<br>
2014/11/11 00:14:02 kid1| Target number of buckets: 5954<br>
2014/11/11 00:14:02 kid1| Using 8192 Store buckets<br>
2014/11/11 00:14:02 kid1| Max Mem size: 524288 KB<br>
2014/11/11 00:14:02 kid1| Max Swap size: 1024000 KB<br>
2014/11/11 00:14:02 kid1| Rebuilding storage in /var/spool/squid (clean log)<br>
2014/11/11 00:14:02 kid1| Using Least Load store dir selection<br>
2014/11/11 00:14:02 kid1| Set Current Directory to /var/spool/squid<br>
2014/11/11 00:14:02 kid1| Finished loading MIME types and icons.<br>
2014/11/11 00:14:02 kid1| HTCP Disabled.<br>
2014/11/11 00:14:02 kid1| Squid plugin modules loaded: 0<br>
2014/11/11 00:14:02 kid1| Adaptation support is off.<br>
2014/11/11 00:14:02 kid1| Accepting HTTP Socket connections at<br>
local=<a href="http://0.0.0.0:3128" target="_blank">0.0.0.0:3128</a> remote=[::] FD 36 flags=9<br>
2014/11/11 00:14:02 kid1| Accepting SSL bumped HTTP Socket connections<br>
at local=<a href="http://0.0.0.0:3126" target="_blank">0.0.0.0:3126</a> remote=[::] FD 37 flags=9<br>
2014/11/11 00:14:02 kid1| Accepting NAT intercepted HTTP Socket<br>
connections at local=<a href="http://0.0.0.0:3129" target="_blank">0.0.0.0:3129</a> remote=[::] FD 38 flags=41<br>
2014/11/11 00:14:02 kid1| Accepting NAT intercepted SSL bumped HTTPS<br>
Socket connections at local=<a href="http://0.0.0.0:3127" target="_blank">0.0.0.0:3127</a> remote=[::] FD 39 flags=41<br>
2014/11/11 00:14:02 kid1| Store rebuilding is 42.19% complete<br>
2014/11/11 00:14:02 kid1| Done reading /var/spool/squid swaplog (9479<br>
entries)<br>
2014/11/11 00:14:02 kid1| Finished rebuilding storage from disk.<br>
2014/11/11 00:14:02 kid1| 9479 Entries scanned<br>
2014/11/11 00:14:02 kid1| 0 Invalid entries.<br>
2014/11/11 00:14:02 kid1| 0 With invalid flags.<br>
2014/11/11 00:14:02 kid1| 9479 Objects loaded.<br>
2014/11/11 00:14:02 kid1| 0 Objects expired.<br>
2014/11/11 00:14:02 kid1| 0 Objects cancelled.<br>
2014/11/11 00:14:02 kid1| 0 Duplicate URLs purged.<br>
2014/11/11 00:14:02 kid1| 0 Swapfile clashes avoided.<br>
2014/11/11 00:14:02 kid1| Took 0.06 seconds (147560.63 objects/sec).<br>
2014/11/11 00:14:02 kid1| Beginning Validation Procedure<br>
2014/11/11 00:14:02 kid1| Completed Validation Procedure<br>
2014/11/11 00:14:02 kid1| Validated 9479 Entries<br>
2014/11/11 00:14:02 kid1| store_swap_size = 920980.00 KB<br>
2014/11/11 00:14:03 kid1| storeLateRelease: released 0 objects<br>
2014/11/11 00:14:09 kid1| Closing HTTP port <a href="http://0.0.0.0:3128" target="_blank">0.0.0.0:3128</a><br>
2014/11/11 00:14:09 kid1| Closing HTTP port <a href="http://0.0.0.0:3126" target="_blank">0.0.0.0:3126</a><br>
2014/11/11 00:14:09 kid1| Closing HTTP port <a href="http://0.0.0.0:3129" target="_blank">0.0.0.0:3129</a><br>
2014/11/11 00:14:09 kid1| Closing HTTPS port <a href="http://0.0.0.0:3127" target="_blank">0.0.0.0:3127</a><br>
FATAL: xstrdup: tried to dup a NULL pointer!<br>
<br>
Squid Cache (Version 3.4.9): Terminated abnormally.<br>
CPU Usage: 0.077 seconds = 0.054 user + 0.023 sys<br>
Maximum Resident Size: 70912 KB<br>
Page faults with physical i/o: 0<br>
Memory usage for squid via mallinfo():<br>
total space in arena: 9328 KB<br>
Ordinary blocks: 9228 KB 5 blks<br>
Small blocks: 0 KB 1 blks<br>
Holding blocks: 10068 KB 6 blks<br>
Free Small blocks: 0 KB<br>
Free Ordinary blocks: 99 KB<br>
Total in use: 19296 KB 207%<br>
Total free: 99 KB 1%<br>
2014/11/11 00:14:09 kid1| storeDirWriteCleanLogs: Starting...<br>
2014/11/11 00:14:09 kid1| Finished. Wrote 9479 entries.<br>
2014/11/11 00:14:09 kid1| Took 0.04 seconds (240455.59 entries/sec).<br>
2014/11/11 00:14:12 kid1| Set Current Directory to /var/spool/squid<br>
2014/11/11 00:14:12 kid1| Starting Squid Cache version 3.4.9 for<br>
x86_64-redhat-linux-gnu...<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
Cheers<br>
<br>
Jason Haar<br>
Corporate Information Security Manager, Trimble Navigation Ltd.<br>
Phone: <a href="tel:%2B1%20408%20481%208171" value="+14084818171">+1 408 481 8171</a><br>
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1<br>
<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</div></div></blockquote></div><br></div>