[squid-users] NET::ERR_CERT_COMMON_NAME_INVALID

[Robert Watson]

here is the relevent part of cache.log from a fresh restart and immediately
trying to access this https site...getting a fwdNegotiateSSL: Error
negotiating SSL connection.

*2014/10/16 14:40:07 kid1| Starting Squid Cache version
3.4.8-20140915-r13174 for x86_64-unknown-linux-gnu...*
*2014/10/16 14:40:07 kid1| Process ID 3459*
*2014/10/16 14:40:07 kid1| Process Roles: worker*
*2014/10/16 14:40:07 kid1| With 1024 file descriptors available*
*2014/10/16 14:40:07 kid1| Initializing IP Cache...*
*2014/10/16 14:40:07 kid1| DNS Socket created at [::], FD 7*
*2014/10/16 14:40:07 kid1| DNS Socket created at 0.0.0.0, FD 8*
*2014/10/16 14:40:07 kid1| Adding domain home from /etc/resolv.conf*
*2014/10/16 14:40:07 kid1| Adding domain ihomelan.net <http://ihomelan.net>
from /etc/resolv.conf*
*2014/10/16 14:40:07 kid1| Adding nameserver 192.168.1.1 from
/etc/resolv.conf*
*2014/10/16 14:40:07 kid1| helperOpenServers: Starting 5/32 'ssl_crtd'
processes*
*2014/10/16 14:40:07 kid1| Logfile: opening log /var/log/squid/access.log*
*2014/10/16 14:40:07 kid1| WARNING: log name now starts with a module name.
Use 'stdio:/var/log/squid/access.log'*
*2014/10/16 14:40:07 kid1| Local cache digest enabled; rebuild/rewrite
every 3600/3600 sec*
*2014/10/16 14:40:07 kid1| Store logging disabled*
*2014/10/16 14:40:07 kid1| Swap maxSize 163840000 + 1048576 KB, estimated
12683736 objects*
*2014/10/16 14:40:07 kid1| Target number of buckets: 634186*
*2014/10/16 14:40:07 kid1| Using 1048576 Store buckets*
*2014/10/16 14:40:07 kid1| Max Mem  size: 1048576 KB*
*2014/10/16 14:40:07 kid1| Max Swap size: 163840000 KB*
*2014/10/16 14:40:07 kid1| Rebuilding storage in /cache (clean log)*
*2014/10/16 14:40:07 kid1| Using Least Load store dir selection*
*2014/10/16 14:40:07 kid1| cannot change current directory to /cache/squid:
(2) No such file or directory*
*2014/10/16 14:40:07 kid1| Current Directory is /*
*2014/10/16 14:40:07 kid1| Finished loading MIME types and icons.*
*2014/10/16 14:40:07 kid1| Squid plugin modules loaded: 0*
*2014/10/16 14:40:07 kid1| Adaptation support is on*
*2014/10/16 14:40:07 kid1| Accepting HTTP Socket connections at
local=127.0.0.1:3128 <http://127.0.0.1:3128> remote=[::] FD 22 flags=9*
*2014/10/16 14:40:07 kid1| Accepting NAT intercepted HTTP Socket
connections at local=192.168.2.1:3128 <http://192.168.2.1:3128> remote=[::]
FD 23 flags=41*
*2014/10/16 14:40:07 kid1| Accepting NAT intercepted SSL bumped HTTPS
Socket connections at local=192.168.2.1:3127 <http://192.168.2.1:3127>
remote=[::] FD 24 flags=41*
*2014/10/16 14:40:07 kid1| Store rebuilding is 53.29% complete*
*2014/10/16 14:40:07 kid1| Done reading /cache swaplog (7505 entries)*
*2014/10/16 14:40:07 kid1| Finished rebuilding storage from disk.*
*2014/10/16 14:40:07 kid1|      7505 Entries scanned*
*2014/10/16 14:40:07 kid1|         0 Invalid entries.*
*2014/10/16 14:40:07 kid1|         0 With invalid flags.*
*2014/10/16 14:40:07 kid1|      7505 Objects loaded.*
*2014/10/16 14:40:07 kid1|         0 Objects expired.*
*2014/10/16 14:40:07 kid1|         0 Objects cancelled.*
*2014/10/16 14:40:07 kid1|         0 Duplicate URLs purged.*
*2014/10/16 14:40:07 kid1|         0 Swapfile clashes avoided.*
*2014/10/16 14:40:07 kid1|   Took 0.03 seconds (225605.72 objects/sec).*
*2014/10/16 14:40:07 kid1| Beginning Validation Procedure*
*2014/10/16 14:40:07 kid1|   Completed Validation Procedure*
*2014/10/16 14:40:07 kid1|   Validated 7505 Entries*
*2014/10/16 14:40:07 kid1|   store_swap_size = 897156.00 KB*
*2014/10/16 14:40:08 kid1| storeLateRelease: released 0 objects*
*2014/10/16 14:40:50 kid1| fwdNegotiateSSL: Error negotiating SSL
connection on FD 26: error:00000000:lib(0):func(0):reason(0) (5/0/0)*
*2014/10/16 14:40:50 kid1| fwdNegotiateSSL: Error negotiating SSL
connection on FD 28: error:00000000:lib(0):func(0):reason(0) (5/0/0)*
*2014/10/16 14:41:11 kid1| fwdNegotiateSSL: Error negotiating SSL
connection on FD 26: error:00000000:lib(0):func(0):reason(0) (5/0/0)*


On Wed, Oct 15, 2014 at 1:43 PM, Robert Watson <robert at gillecaluim.com>
wrote:

> Has anyone got this error when performing https proxy? I only receive it
> on a couple of https websites.  How to fix?
> Robert
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141016/970293f9/attachment.html>