[squid-dev] [PATCH] Don't force -b 2048 into sslcrtd_program arguments

Nathan Hoad nathan at getoffmalawn.com
Fri Apr 29 04:03:37 UTC 2016


Hello,

Attached is a patch that moves the filesystem block size retrieval for the
default certificate generation helper out of Ssl::Helper::Init() and into
security_file_certgen.cc, so that non-default helpers can work as expected
without having to handle this argument.

My usecase: I'm using nc for sslcrtd_program, to connect to a daemon that
generates certificates. nc (understandably) rejects the argument that this
patch moves. I realise I could have written a wrapper script of some sort
to bypass the issue completely, but this feels like the more correct thing
to do.

As mentioned in the patch preamble, I wanted to use fsBlockSize, but due to
the sheer number of dependencies it introduces, it seemed infeasible to do
so. I cannot see how to do this without a substantial code shift.

Thank you,

Nathan.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20160429/f66513a9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sslcrtd_program-no-forced-arguments.patch
Type: text/x-patch
Size: 11295 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20160429/f66513a9/attachment.bin>


More information about the squid-dev mailing list