<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Good afternoon,<div><br></div><div>I am trying to setup squid with SSL inspection. I'm currently running the following OS and squid versions.</div><div><b>lsb_release -a</b></div><div><div>Distributor ID:<span style="white-space:pre"> </span>Ubuntu</div><div>Description:<span style="white-space:pre"> </span>Ubuntu 18.04.1 LTS</div><div>Release:<span style="white-space:pre"> </span>18.04</div><div>Codename:<span style="white-space:pre"> </span>bionic</div><div><br></div><div><div><b>squid -v</b></div><div>Squid Cache: Version 3.5.28</div><div>Service Name: squid</div><div><br></div><div>This binary uses OpenSSL 1.0.2n 7 Dec 2017. For legal restrictions on distribution see <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a></div><div><br></div><div>configure options: '--enable-linux-netfilter' '--enable-icap-client' '--enable-ssl' '--with-filedescriptors=65536' '--with-large-files' '--prefix=/usr' '--localstatedir=/var' '--libexecdir=/lib/squid' '--srcdir=.' '--datadir=/share/squid' '--sysconfdir=/etc/squid' '--enable-ssl-crtd' '--with-openssl' --enable-ltdl-convenience</div></div><div><br></div><div>When I start squid or check squid while using sudo I get the following errors.</div><div><div><b>squid -s</b></div><div>WARNING: Cannot write log file: /var/logs/cache.log</div><div>/var/logs/cache.log: Permission denied</div><div> messages will be sent to 'stderr'.</div></div><div><br></div><div><div><b>systemctl status squid</b></div><div>● squid.service - LSB: Squid HTTP Proxy version 3.x</div><div> Loaded: loaded (/etc/init.d/squid; generated)</div><div> Active: active (exited) since Fri 2018-10-05 20:48:20 UTC; 4 days ago</div><div> Docs: man:systemd-sysv-generator(8)</div><div> Process: 1387 ExecStart=/etc/init.d/squid start (code=exited, status=0/SUCCESS)</div><div><br></div><div>Oct 05 20:48:26 orthotnproxy (squid-1)[1937]: UFSSwapDir::openLog: Failed to open swap log.</div><div>Oct 05 20:48:26 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1937 exited with status 1</div><div>Oct 05 20:48:29 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1946 started</div><div>Oct 05 20:48:29 orthotnproxy (squid-1)[1946]: UFSSwapDir::openLog: Failed to open swap log.</div><div>Oct 05 20:48:29 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1946 exited with status 1</div><div>Oct 05 20:48:32 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1955 started</div><div>Oct 05 20:48:32 orthotnproxy (squid-1)[1955]: UFSSwapDir::openLog: Failed to open swap log.</div><div>Oct 05 20:48:32 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1955 exited with status 1</div><div>Oct 05 20:48:32 orthotnproxy squid[1625]: Squid Parent: (squid-1) process 1955 will not be restarted due to repeated, frequent failures</div><div>Oct 05 20:48:32 orthotnproxy squid[1625]: Exiting due to repeated, frequent failures</div></div><div><br></div><div>The SSL part of my config is: (I can and will post more of the squid.conf file if needed)</div><div><div>http_port 3128 ssl-bump cert=/etc/squid/ssl_cert/proxyCA.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MB</div><div><br></div><div>acl step1 at_step SslBump1</div><div><br></div><div>ssl_bump peek step1</div><div>ssl_bump bump all</div><div><br></div><div>sslproxy_cafile /usr/local/openssl/cabundle.file</div></div><div><br></div><div>I'm lost and appreciate any help.</div><div><br></div><div>Thank you</div><div>Mike</div><div><br></div><div><br></div><div><br></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span style="background-color:rgb(255,255,255)"><div><font face="Calibri" style="font-family:arial,sans-serif"><font face="Trebuchet MS" size="4">--------------------------------------------</font><br></font><font face="verdana, sans-serif">Michael Barnes<br>Operations Supervisor</font></div></span><span style="background-color:rgb(255,255,255)"><span style="color:rgb(0,86,149);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:19px;font-weight:bold">OrthoTennessee</span></span><div><span style="background-color:rgb(255,255,255)"><b><font face="verdana, sans-serif">865.769.4526</font></b></span><font color="#005695" face="verdana, sans-serif"><span style="font-size:19px"><b><br></b></span></font><span style="background-color:rgb(255,255,255)"><div><font face="verdana, sans-serif"><a href="mailto:michael.barnes@orthotennessee.com" style="color:rgb(51,102,51)" target="_blank">mbarnes@orthotennessee.com</a><br><font size="4"><b><br></b></font></font></div><div><font face="verdana, sans-serif"><font><font size="2"><strong>If you need help from the IT Dept. please email:</strong></font><font size="4"> </font></font><a href="mailto:support@orthotennessee.com" style="font-size:large;color:rgb(51,102,51)" target="_blank"><font>support@orthotennessee.com</font></a></font><font face="'Times New Roman'" size="3"><br></font></div></span></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br>
<div><hr></div><div></div><span style="color:rgb(98,98,98);font-family:Helvetica,Arial,sans-serif;line-height:20.8px;background-color:rgb(255,255,255)"><i>The information contained in this transmission may contain privileged and confidential information, including patient information protected by federal and state privacy laws. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution, or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.</i></span><span style="font-family:Helvetica,Arial,sans-serif;line-height:20.8px"><font size="2"><i style="background-color:white"><font color="#ffffff">he information contained in this transmission may contain privileged and confidential information, including patient information protected by federal and state privacy laws. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution, or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply</font></i></font></span>