[squid-users] Squid 3.4.10 and sslcrtd

Amos Jeffries squid3 at treenet.co.nz
Wed May 20 11:06:32 UTC 2015


On 19/05/2015 10:43 p.m., Veiko Kukk wrote:
> On 18/05/15 15:28, Amos Jeffries wrote:
>> Having a directive commented out means the default value for it is used.
>> There is a default helper built by --enable-ssl-crtd that gets used
>> unless you specify otherwise.
>>
>> Currently Squid is not detecting that the helper is unused, so checks
>> for its existence and attempts to run some. Some other helpers also have
>> this problem.
>>
>> The workaround is to also explicitly configure:
>>   sslcrtd_children 0
> 
> Unfortunately, this results in error:
> 
> 2015/05/19 10:41:08| Processing: sslcrtd_children 0
> 2015/05/19 10:41:08| ERROR: The maximum number of processes cannot be
> less than 1.
> FATAL: Bungled /etc/squid/conf.d/squid.conf line 12: sslcrtd_children 0
> Squid Cache (Version 3.4.10): Terminated abnormally.
> CPU Usage: 0.004 seconds = 0.003 user + 0.001 sys
> Maximum Resident Size: 26320 KB
> Page faults with physical i/o: 0
> 

Ouch, sorry. Maybe this will work:
 sslcrtd_children 1 startup=0

Otherwise you are left with re-building Squid. --disable-ssl-crtd would
do if you never want to use the helper. Or the patch now applied on
Squid-4
(<http://www.squid-cache.org/Versions/v4/changesets/squid-4-14080.patch>) should
also apply fairly easily to your version.

Amos


More information about the squid-users mailing list