[squid-users] security_file_certgen problem

leomessi983 at yahoo.com leomessi983 at yahoo.com
Sun May 5 09:09:58 UTC 2019


Hi;I compiled last git version of squid 4.6-VCS my last problem with UDP log is solved but I still have problem with security_file_certgen!I reported this problem before with squid 4.6.When I use last security_file_certgen binary file that created with compiled files of squid 4.6-VCS or squid 4.6, I can not open HTTPS site and squid restart over and over with error below!
When i use security_file_certgen binary file from squid4.3 that I compiled before and create my new .deb package of squid 4.6-VCS compiled files with security_file_certgen binary, problem solved.
I dont know why?Do you know how can I solve this problem?

My cach.log:2019/05/05 12:50:07| Removing PID file (/var/run/squid.pid)
2019/05/05 12:50:07| Created PID file (/var/run/squid.pid)
2019/05/05 12:50:07| Current Directory is /
2019/05/05 12:50:07| Starting Squid Cache version 4.6-VCS for x86_64-unknown-linux-gnu...
2019/05/05 12:50:07| Service Name: squid
2019/05/05 12:50:07| Process ID 7839
2019/05/05 12:50:07| Process Roles: master worker
2019/05/05 12:50:07| With 65536 file descriptors available
2019/05/05 12:50:07| Initializing IP Cache...
2019/05/05 12:50:07| DNS Socket created at [::], FD 3
2019/05/05 12:50:07| DNS Socket created at 0.0.0.0, FD 11
2019/05/05 12:50:07| Adding nameserver 8.8.8.8 from /etc/resolv.conf
2019/05/05 12:50:07| helperOpenServers: Starting 5/10 'security_file_certgen' processes
2019/05/05 12:50:07| Logfile: opening log udp://127.0.0.1:12188
2019/05/05 12:50:07| Store logging disabled
2019/05/05 12:50:07| Swap maxSize 0 + 0 KB, estimated 0 objects
2019/05/05 12:50:07| Target number of buckets: 0
2019/05/05 12:50:07| Using 8192 Store buckets
2019/05/05 12:50:07| Max Mem  size: 0 KB
2019/05/05 12:50:07| Max Swap size: 0 KB
2019/05/05 12:50:07| Using Least Load store dir selection
2019/05/05 12:50:07| Current Directory is /
2019/05/05 12:50:07| Finished loading MIME types and icons.
2019/05/05 12:50:07| HTCP Disabled.
2019/05/05 12:50:07| Squid plugin modules loaded: 0
2019/05/05 12:50:07| Adaptation support is off.
2019/05/05 12:50:07| Accepting HTTP Socket connections at local=0.0.0.0:3128 remote=[::] FD 23 flags=9
2019/05/05 12:50:07| Accepting TPROXY intercepted HTTP Socket connections at local=0.0.0.0:3129 remote=[::] FD 24 flags=25
2019/05/05 12:50:07| Accepting TPROXY intercepted SSL bumped HTTPS Socket connections at local=[::]:3130 remote=[::] FD 25 flags=25
2019/05/05 12:50:08| WARNING: /usr/lib64/squid/security_file_certgen -s /var/lib/ssl_db -M 20MB #Hlpr1 exited
2019/05/05 12:50:08| Too few /usr/lib64/squid/security_file_certgen -s /var/lib/ssl_db -M 20MB processes are running (need 1/10)
2019/05/05 12:50:08| Closing HTTP(S) port 0.0.0.0:3128
2019/05/05 12:50:08| Closing HTTP(S) port 0.0.0.0:3129
2019/05/05 12:50:08| Closing HTTP(S) port [::]:3130
2019/05/05 12:50:08| storeDirWriteCleanLogs: Starting...
2019/05/05 12:50:08|   Finished.  Wrote 0 entries.
2019/05/05 12:50:08|   Took 0.00 seconds (  0.00 entries/sec).
2019/05/05 12:50:08| FATAL: The /usr/lib64/squid/security_file_certgen -s /var/lib/ssl_db -M 20MB helpers are crashing too rapidly, need help!

2019/05/05 12:50:08| Squid Cache (Version 4.6-VCS): Terminated abnormally.
CPU Usage: 0.086 seconds = 0.067 user + 0.019 sys
Maximum Resident Size: 113648 KB
Page faults with physical i/o: 0
2019/05/05 12:50:08| Removing PID file (/var/run/squid.pid)
squid -v:root at debian:~# squid -v
Squid Cache: Version 4.6-VCS
Service Name: squid

This binary uses OpenSSL 1.0.1t  3 May 2016. For legal restrictions on distribution see https://www.openssl.org/source/license.html

configure options:  '--with-openssl' '--enable-ssl-crtd' '--prefix=/usr' '--enable-linux-netfilter' '--with-netfilter-conntrack' '--exec-prefix=/usr' '--includedir=/usr/include' '--datadir=/usr/share/squid' '--libdir=/usr/lib64' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--sysconfdir=/etc/squid/' '--sharedstatedir=/var/lib/' '--with-logdir=/var/log/squid/' '--enable-ltdl-convenience' '--enable-http-violations'


Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190505/b70b57ae/attachment.html>


More information about the squid-users mailing list