[squid-users] ssl bump

[Vacheslav]

16.07.2026 16:36, Alex Rousskov пишет:
> On 2026-07-16 01:57, Vacheslav wrote:
>
>> 2026/07/16 08:34:24 kid1| WARNING: sslcrtd_program #Hlpr1 exited
>
> We need to figure out why your security_file_certgen helpers are 
> exiting. IIRC, those helpers have not been upgraded to report their 
> fatal failures to cache.log. There are a few tricks you can use to see 
> what the problem is, but I would probably start with these three:
>
> 1. Run security_file_certgen with sslcrtd_program parameters from the 
> command line, as Squid user. If you are lucky, it will complain about 
> something before it starts waiting for the helper request.

so far i managed to do this: stop squid and
sudo -u squid /usr/libexec/squid/security_file_certgen -s 
/var/cache/squid/ssl_db/certs -M 4MB
2026/07/17 08:15:13 sslcrtd_program| FATAL: Cannot generate 
certificates: Uninitialized SSL certificate database directory: 
/var/cache/squid/ssl_db/certs. To initialize, run "security_file_certgen 
-c -s /var/cache/squid/ssl_db/certs".
     exception location: certificate_db.cc(497) load




> 2. Redirect security_file_certgen stderr (but not stdout!) output into 
> a dedicated log file. It may be possible to do that right on the 
> sslcrtd_program line, without wrapping the helper into another script.

how to do that?

> 3. Enable full debugging, reproduce the problem with a single 
> transaction, and send a link to the corresponding compressed cache.log 
> file for analysis as detailed at 
> https://wiki.squid-cache.org/SquidFaq/BugReporting#debugging-a-single-transaction 
>

God willing and we be living i'll try this later

> Cheers,
>
> Alex.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260717/47683627/attachment.htm>