<div dir="auto">Check your file permissions on the key.</div><div class="gmail_extra"><br><div class="gmail_quote">On Dec 18, 2016 2:13 PM, <creditu@eml.cc> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I'm having trouble getting the sslpassword_program working for an<br>
encrypted key. Config looks like this:<br>
<br>
sslpassword_program /usr/local/bin/pass.sh<br>
https_port <a href="http://10.10.10.1:443" rel="noreferrer" target="_blank">10.10.10.1:443</a> accel vhost cert=/etc/squid/www.crt<br>
key=/etc/squid/private.key<br>
<br>
On start, cache log states "Ignoring https_port <a href="http://10.10.10.1:443" rel="noreferrer" target="_blank">10.10.10.1:443</a> due to<br>
SSL initialization failure."<br>
On stop, console states "Failed to acquire SSL private key<br>
'/etc/squid/private.key': error:0200100D:system library:fopen:Permission<br>
denied"<br>
<br>
Removing the passphrase from the private key, squid starts normally.<br>
Permissions on the encrypted and non-encrypted keys are the same. I<br>
also tried putting the pass.sh program in /bin. The pass.sh program<br>
looks like this:<br>
#!/bin/sh<br>
echo "testing"<br>
<br>
The hash of the private key modulus and the certificate modulus match as<br>
well.<br>
<br>
Am I missing something? This is on squid 3.1.<br>
______________________________<wbr>_________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.<wbr>org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/<wbr>listinfo/squid-users</a><br>
</blockquote></div></div>
<br>
<p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p><p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p><p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p><div><div style="font-size:1.3em"><b style="color:rgb(34,34,34);font-size:1.3em"><font size="2"><span style="line-height:14.7200002670288px;font-family:Arial">Disclaimer:</span> </font></b><span style="color:rgb(34,34,34);font-size:x-small;line-height:11.5px;font-family:Arial">Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing.</span></div></div><p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p><p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p><p style="font-size:1.3em;font-family:Arial,Helvetica,sans-serif"></p>