First conclusion:
I first tried to use the same squid.conf as I use with the "default" 2.5
version (without any patche's or ssl conf things)
For users who do not activate the option (default it should be disabled)
Squid fails to start .......
Here is what is in my /var/log/messages:
Feb 11 14:39:26 mis2 squid[7158]: Squid Parent: child process 7161 started
Feb 11 14:39:27 mis2 (squid): Failed to acquire SSL certificate:
error:0200100E:system library:fopen:Bad address
Feb 11 14:39:27 mis2 squid[7158]: Squid Parent: child process 7161 exited
with status 1
Feb 11 14:39:30 mis2 squid[7158]: Squid Parent: child process 7176 started
Feb 11 14:39:30 mis2 (squid): Failed to acquire SSL certificate:
error:0200100E:system library:fopen:Bad address
Feb 11 14:39:30 mis2 squid[7158]: Squid Parent: child process 7176 exited
with status 1
Feb 11 14:39:33 mis2 squid[7158]: Squid Parent: child process 7611 started
Feb 11 14:39:33 mis2 (squid): Failed to acquire SSL certificate:
error:0200100E:system library:fopen:Bad address
Feb 11 14:39:33 mis2 squid[7158]: Squid Parent: child process 7611 exited
with status 1
Feb 11 14:39:36 mis2 squid[7158]: Squid Parent: child process 8607 started
Feb 11 14:39:37 mis2 (squid): Failed to acquire SSL certificate:
error:0200100E:system library:fopen:Bad address
Feb 11 14:39:37 mis2 squid[7158]: Squid Parent: child process 8607 exited
with status 1
Feb 11 14:39:40 mis2 squid[7158]: Squid Parent: child process 9181 started
Feb 11 14:39:40 mis2 (squid): Failed to acquire SSL certificate:
error:0200100E:system library:fopen:Bad address
Feb 11 14:39:40 mis2 squid[7158]: Squid Parent: child process 9181 exited
with status 1
Feb 11 14:39:40 mis2 squid[7158]: Exiting due to repeated, frequent failures
So I think for people NOT using SSL you should do some tuning.....
----- Original Message -----
From: "Henrik Nordstrom" <hno@hem.passagen.se>
To: "Henk-Jan Kloosterman" <proxy@kloosterman.org>
Cc: <squid-dev@squid-cache.org>
Sent: Sunday, February 11, 2001 12:50 PM
Subject: Re: ssl branch compile problems
> Henk-Jan Kloosterman wrote:
> >
> > It compiled allright: this time:
> >
> > I will start to trie it now and keep you posted about the progress.
(First I
> > will see what thie config must look like)
>
> Good.
>
> The SSL patch adds the following three directives:
> https_port
> ssl_certificate
> ssl_key
>
> ssl_certificate and ssl_key can be set to the same file if you have a
> combined sertificate+key file.
>
> /Henrik
>
>
> A small note: While you was compiling the sources have been brought up
> to date wrt the main source tree, and this has changed the format of
> cache_dir to look more like the Squid-2.3 release. So next time you
> update the sources you will have to remove the -1 from the cache_dir
> line.
Received on Mon Feb 12 2001 - 04:41:27 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:13:30 MST