[squid-users] ssl bump

[Andrey K]

@Vacheslav:
> sudo /usr/libexec/squid/security_file_certgen -c -s
> /var/cache/squid/ssl_db/certs -M 4MB
You specified the wrong path (the correct one is  /var/cache/squid/ssl_db ).

To recreate a certificate database you should do:

sudo rm -rf /var/cache/squid/ssl_db
sudo /usr/libexec/squid/security_file_certgen -c -s /var/cache/squid/ssl_db
-M 4MB
sudo chown -R squid:squid /var/cache/squid/ssl_db

чт, 16 июл. 2026 г. в 16:36, Alex Rousskov <rousskov at measurement-factory.com
>:

> On 2026-07-16 01:57, Vacheslav wrote:
>
> > 2026/07/16 08:34:24 kid1| WARNING: sslcrtd_program #Hlpr1 exited
>
> We need to figure out why your security_file_certgen helpers are
> exiting. IIRC, those helpers have not been upgraded to report their
> fatal failures to cache.log. There are a few tricks you can use to see
> what the problem is, but I would probably start with these three:
>
> 1. Run security_file_certgen with sslcrtd_program parameters from the
> command line, as Squid user. If you are lucky, it will complain about
> something before it starts waiting for the helper request.
>
> 2. Redirect security_file_certgen stderr (but not stdout!) output into a
> dedicated log file. It may be possible to do that right on the
> sslcrtd_program line, without wrapping the helper into another script.
>
> 3. Enable full debugging, reproduce the problem with a single
> transaction, and send a link to the corresponding compressed cache.log
> file for analysis as detailed at
>
> https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction
>
>
> Cheers,
>
> Alex.
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> https://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260716/bc5a6e98/attachment.htm>