[squid-users] ssl bump

[Alex Rousskov]

On 2026-07-14 01:06, Vacheslav wrote:
> sudo /usr/libexec/squid/security_file_certgen -c -s 
> /var/cache/squid/ssl_db/certs -M 4MB
> Initialization SSL db...
> 2026/07/14 07:42:00 sslcrtd_program| FATAL: Cannot generate 
> certificates: Cannot create /var/cache/squid/ssl_db/certs
>      exception location: certificate_db.cc(374) Create

>  /var/cache/squid/ssl_db/certs certs is empty

>  how to solve the problem? 

The FATAL failure you quoted above is probably because "/var/cache/squid 
/ssl_db/certs" directory already exists. You should probably remove that 
directory (and anything else in "/var/cache/squid/ssl_db") if you want 
to re-initialize the certificate database from scratch.


>  2026/07/14 07:37:49 sslcrtd_program| FATAL: Cannot generate certificates: Unknown bytes unit: M

This failure is probably a Squid misconfiguration: AFAICT, Certificate 
generator shipped with Squid has two parameters that support byte units: 
"-b" and "-m". Those parameters support "B", "KB", "MB", "GB" byte units 
but not "M".

The generator program name and its parameters are specified using 
"sslcrtd_program" directive in "squid.conf". The default uses "-M 4MB" 
parameter. I am guessing you have customized that default.

This misconfiguration ought to lead to the following errors (that you 
have also seen/shared):

> 2026/07/14 07:37:49 kid1| WARNING: sslcrtd_program #Hlpr1 exited
> 2026/07/14 07:37:49 kid1| Too few sslcrtd_program processes are running (need 1/5)
> 2026/07/14 07:37:49 kid1| FATAL: The sslcrtd_program helpers are crashing too rapidly, need help!


HTH,

Alex.