<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1492528168938_232172"><span>Never mind I've sorted it! The issue was due to the /var/run directory and the program not being able to create squid.pid. I amended the permissions and seems to be working fine now</span></div><div></div><div id="yui_3_16_0_ym19_1_1492528168938_232200"> </div><div class="signature" id="yui_3_16_0_ym19_1_1492528168938_232212">oliver@lennox-it.uk<br><a rel="nofollow" target="_blank" href="http://lennox-it.uk/">lennox-it.uk</a><br>tel: 07900 648 252</div><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1492528168938_232216" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;" id="yui_3_16_0_ym19_1_1492528168938_232215"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1492528168938_232214"> <div dir="ltr" id="yui_3_16_0_ym19_1_1492528168938_232213"> <font size="2" face="Arial" id="yui_3_16_0_ym19_1_1492528168938_232231"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Olly Lennox <oliver@lennox-it.uk><br> <b><span style="font-weight: bold;">To:</span></b> L. P. H. van Belle <belle@bazuin.nl>; "squid-users@squid-cache. org" <squid-users@squid-cache.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, 19 April 2017, 12:24<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [squid-users] HTTPS woes<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1492528168938_232218"><br><div dir="ltr" id="yui_3_16_0_ym19_1_1492528168938_232220">Hi Louis,<br clear="none"><br clear="none">Thanks a lot for the link, I'll implement that once I get this problem fixed. Sadly the change hasn't worked. My current /etc/fstab looks like this:<br clear="none"><br clear="none"><br clear="none">proc /proc proc defaults 0 0 <br clear="none">PARTUUID=0d001852-01 /boot vfat defaults 0 2 <br clear="none">PARTUUID=0d001852-02 / ext4 defaults,noatime 0 1 <br clear="none"># a swapfile is not a swap partition, no line here <br clear="none"># use dphys-swapfile swap[on|off] for that <br clear="none">tmpfs /cache tmpfs defaults,noatime,nosuid,size=8000m 0 0 <br clear="none">none /dev/shm tmpfs defaults 0 0 <br clear="none"><br clear="none">could the existing tmpfs line be causing problems?<br clear="none"><br clear="none"><a shape="rect" ymailto="mailto:oliver@lennox-it.uk" href="mailto:oliver@lennox-it.uk">oliver@lennox-it.uk</a><br clear="none">lennox-it.uk<br clear="none">tel: 07900 648 252<br clear="none"><br clear="none"><br clear="none"><br clear="none">________________________________<br clear="none">From: L. P. H. van Belle <<a shape="rect" ymailto="mailto:belle@bazuin.nl" href="mailto:belle@bazuin.nl">belle@bazuin.nl</a>><br clear="none">To: "<a shape="rect" ymailto="mailto:squid-users@squid-cache." href="mailto:squid-users@squid-cache.">squid-users@squid-cache.</a> org" <<a shape="rect" ymailto="mailto:squid-users@squid-cache.org" href="mailto:squid-users@squid-cache.org">squid-users@squid-cache.org</a>> <br clear="none">Sent: Wednesday, 19 April 2017, 11:05<br clear="none">Subject: Re: [squid-users] HTTPS woes<br clear="none"><br clear="none"><br clear="none"><br clear="none">Hai, <br clear="none"><br clear="none"><br clear="none">Im guess, squid is starting to soon, or there is not /dev/shm <br clear="none"><br clear="none"><br clear="none">Check/Try adding, if not already in /etc/fstab <br clear="none"><br clear="none"><br clear="none">none /dev/shm tmpfs defaults 0 0 <br clear="none"><br clear="none"><br clear="none">And reboot the server. <br clear="none"><br clear="none"><br clear="none"><br clear="none">Or, i dont know and someone else can tell you. ;-) <br clear="none"><br clear="none">But on my jessie with squid 3.5.24+ssl i dont see this problem. <br clear="none"><br clear="none"><br clear="none">A small tip about the certificates on debian or ubuntu. <br clear="none"><br clear="none">Install ca-certificates ( apt-get install ca-certificates ) <br clear="none"><br clear="none">And read : <a shape="rect" href="https://www.brightbox.com/blog/2014/03/04/add-cacert-ubuntu-debian/" target="_blank">https://www.brightbox.com/blog/2014/03/04/add-cacert-ubuntu-debian/ </a><br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none">Greetz, <br clear="none"><br clear="none"><br clear="none">Louis<br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none"><br clear="none">> -----Oorspronkelijk bericht-----<br clear="none"><br clear="none">> Van: squid-users <br clear="none"><br clear="none">> [mailto:<a shape="rect" ymailto="mailto:squid-users-bounces@lists.squid-cache.org" href="mailto:squid-users-bounces@lists.squid-cache.org">squid-users-bounces@lists.squid-cache.org</a>] Namens Olly Lennox<br clear="none"><br clear="none">> Verzonden: woensdag 19 april 2017 11:22<br clear="none"><br clear="none">> Aan: Amos Jeffries; <a shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><br clear="none">> Onderwerp: Re: [squid-users] HTTPS woes<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Thanks Amos, I'll install this. One last question if I may! <br clear="none"><br clear="none">> Squid is working fine now with both HTTP and HTTPS but for <br clear="none"><br clear="none">> some reason it is refusing to launch on boot. <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> It works perfectly when started with "service squid start" <br clear="none"><br clear="none">> but not boot. The error is:<br clear="none"><br clear="none">> squid.service - LSB: Squid HTTP Proxy version 3.x<br clear="none"><br clear="none">> Loaded: loaded (/etc/init.d/squid; generated; vendor <br clear="none"><br clear="none">> preset: enabled)<br clear="none"><br clear="none">> Active: failed (Result: resources) since Wed 2017-04-19 <br clear="none"><br clear="none">> 10:19:18 BST; 53s ago<br clear="none"><br clear="none">> Docs: man:systemd-sysv-generator(8)<br clear="none"><br clear="none">> Process: 598 ExecStart=/etc/init.d/squid start <br clear="none"><br clear="none">> (code=exited, status=0/SUCCESS)<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Apr 19 10:19:13 raspberrypi (squid-1)[1606]: <br clear="none"><br clear="none">> Ipc::Mem::Segment::open failed to <br clear="none"><br clear="none">> shm_open(/squid-ssl_session_cache.shm): (2) No such file or <br clear="none"><br clear="none">> direct Apr 19 10:19:13 raspberrypi squid[1283]: Squid Parent: <br clear="none"><br clear="none">> (squid-1) process 1606 exited with status 1 Apr 19 10:19:16 <br clear="none"><br clear="none">> raspberrypi squid[1283]: Squid Parent: (squid-1) process 1633 <br clear="none"><br clear="none">> started Apr 19 10:19:18 raspberrypi squid[1283]: Squid <br clear="none"><br clear="none">> Parent: (squid-1) process 1633 exited with status 1 Apr 19 <br clear="none"><br clear="none">> 10:19:18 raspberrypi squid[1283]: Squid Parent: (squid-1) <br clear="none"><br clear="none">> process 1633 will not be restarted due to repeated, frequent <br clear="none"><br clear="none">> failures Apr 19 10:19:18 raspberrypi squid[1283]: Exiting due <br clear="none"><br clear="none">> to repeated, frequent failures Apr 19 10:19:18 raspberrypi <br clear="none"><br clear="none">> systemd[1]: squid.service: Daemon never wrote its PID file. Failing.<br clear="none"><br clear="none">> Apr 19 10:19:18 raspberrypi systemd[1]: Failed to start LSB: <br clear="none"><br clear="none">> Squid HTTP Proxy version 3.x.<br clear="none"><br clear="none">> Apr 19 10:19:18 raspberrypi systemd[1]: squid.service: Unit <br clear="none"><br clear="none">> entered failed state.<br clear="none"><br clear="none">> Apr 19 10:19:18 raspberrypi systemd[1]: squid.service: Failed <br clear="none"><br clear="none">> with result 'resources'.<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Any ideas?<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> ________________________________<br clear="none"><br clear="none">> From: Amos Jeffries <<a shape="rect" ymailto="mailto:squid3@treenet.co.nz" href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>><br clear="none"><br clear="none">> To: <a shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><br clear="none">> Sent: Wednesday, 19 April 2017, 5:22<br clear="none"><br clear="none">> Subject: Re: [squid-users] HTTPS woes<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Olly, Debian provides a ca-certificates package containing <br clear="none"><br clear="none">> the Mozilla CA list. It is updated whenever the CA set <br clear="none"><br clear="none">> changes. Though of course you should have apt connected to <br clear="none"><br clear="none">> the relevant security repository (jesse-security?) for <br clear="none"><br clear="none">> regular updates.<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Amos<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> <br clear="none"><br clear="none">> On 19/04/17 03:10, Olly Lennox wrote:<br clear="none"><br clear="none">> <br clear="none"><br clear="none">> Would you mind sharing the script you use?<br clear="none"><br clear="none">> > <br clear="none"><br clear="none">> ><a shape="rect" ymailto="mailto:oliver@lennox-it.uk" href="mailto:oliver@lennox-it.uk">oliver@lennox-it.uk</a><br clear="none"><br clear="none">> >lennox-it.uk<br clear="none"><br clear="none">> >tel: 07900 648 252<br clear="none"><br clear="none">> ><br clear="none"><br clear="none">> <br clear="none"><br clear="none"><br clear="none">_______________________________________________<br clear="none"><br clear="none">squid-users mailing list<br clear="none"><br clear="none"><a shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><br clear="none"><a shape="rect" href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><div class="yqt1630500950" id="yqtfd71486"><br clear="none">_______________________________________________<br clear="none">squid-users mailing list<br clear="none"><a shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><a shape="rect" href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>