<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class="">Hi guys,</span><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">I am trying to setup squid with TLS intercaption on Docker in an alpine linux image.</div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">My configuration is as follows:</div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><pre class="" style="background-color: rgb(255, 255, 255); color: rgb(85, 85, 85); font-family: "JetBrains Mono", monospace;">access_log /dev/stdout<br class=""><br class="">https_port 0.0.0.0:3128 \<br class=""> intercept \<br class=""> ssl-bump \<br class=""> <span class="" style="color: rgb(202, 54, 213);">cert</span>=/ca.pem \<br class=""> <span class="" style="color: rgb(202, 54, 213);">generate-host-certificates</span>=on \<br class=""> <span class="" style="color: rgb(202, 54, 213);">dynamic_cert_mem_cache_size</span>=500MB<br class=""><span class="" style="color: rgb(181, 190, 206);"><br class=""></span>sslcrtd_program /usr/lib/squid/security_file_certgen -s /cache/ssl.db -M 100MB<br class="">sslcrtd_children 5<br class=""><br class="">ssl_bump server-first all<br class="">sslproxy_cert_error allow all<br class=""></pre><div class=""><br class=""></div></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">And the Dockerfile:</div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><pre class="" style="background-color: rgb(255, 255, 255);"><font face="JetBrains Mono, monospace" color="#2183d3" class="" style="caret-color: rgb(33, 131, 211);">FROM </font><font color="#555555" face="JetBrains Mono, monospace" class="">alpine</font><font color="#555555" face="JetBrains Mono, monospace" class=""><br class=""></font><span class="" style="color: rgb(181, 190, 206); font-family: "JetBrains Mono", monospace;"><br class=""></span><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">RUN </span><font color="#555555" face="JetBrains Mono, monospace" class="">apk add </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">-</span><font color="#555555" face="JetBrains Mono, monospace" class="">U </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">--</span><font color="#555555" face="JetBrains Mono, monospace" class="">no-cache squid <br class=""></font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">COPY </span><font color="#555555" face="JetBrains Mono, monospace" class="">cmd</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">config</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">ca.pem cmd/config/squid.conf </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/<br class=""></span><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">RUN </span><font color="#555555" face="JetBrains Mono, monospace" class="">mkdir </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">-</span><font color="#555555" face="JetBrains Mono, monospace" class="">p </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">cache \<br class=""> </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">&& /</span><font color="#555555" face="JetBrains Mono, monospace" class="">usr</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">lib</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">squid</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">security_file_certgen </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">-</span><font color="#555555" face="JetBrains Mono, monospace" class="">c </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">-</span><font color="#555555" face="JetBrains Mono, monospace" class="">s </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">cache</font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">/</span><font color="#555555" face="JetBrains Mono, monospace" class="">ssl.db </font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">-</span><font color="#555555" face="JetBrains Mono, monospace" class="">M 100MB<br class=""></font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;"><br class=""></span><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">EXPOSE </span><span class="" style="color: rgb(181, 112, 47); font-family: "JetBrains Mono", monospace;">3128</span><font color="#555555" face="JetBrains Mono, monospace" class=""><br class=""></font><span class="" style="color: rgb(33, 131, 211); font-family: "JetBrains Mono", monospace;">ENTRYPOINT </span><font color="#555555" face="JetBrains Mono, monospace" class="">[</font><span class="" style="color: rgb(79, 160, 57); font-family: "JetBrains Mono", monospace;">"</span><font color="#4fa039" face="JetBrains Mono, monospace" class="">/usr/sbin/squid<span class="" style="caret-color: rgb(79, 160, 57);">”, </span>“-f”, "/squid.conf”]</font></pre><div class=""><br class=""></div><div class="">However, this always exits with following error:</div></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><div class="">proxy_1 | [00] 2020/11/18 15:38:27| WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.</div><div class="">proxy_1 | [00] 2020/11/18 15:38:27| FATAL: No valid signing certificate configured for HTTPS_port 0.0.0.0:3128</div><div class="">proxy_1 | [00] 2020/11/18 15:38:27| Squid Cache (Version 4.13): Terminated abnormally.</div><div class="">proxy_1 | [00] CPU Usage: 0.036 seconds = 0.021 user + 0.014 sys</div><div class="">proxy_1 | [00] Maximum Resident Size: 42256 KB</div><div class="">proxy_1 | [00] Page faults with physical i/o: 0</div></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">And cmd/<a href="http://config.ca" class="">config</a>/ca.pem was created with the command from the wiki on macOS: openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout ca.pem -out ca.pem</div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Any ideas? Thanks!</div><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br class=""></div><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-- <br class="">Met vriendelijke groeten,<br class="">Niels Hofmans<br class=""><br class="">SITE <a href="https://ironpeak.be" class="">https://ironpeak.be</a><br class="">BTW BE0694785660<br class="">BANK BE76068909740795</div></div>
</div>
<br class=""></body></html>