Re: [squid-users] squid: ssl_crtd processes crashing instantly

On May 3, 2012, at 5:05 AM, Ahmed Talha Khan wrote:

> Hey all,
> I am using squid 3.2.17 to generate dynamic certificates in my proxy
> setup. The certificate generation programs are crashing instantly when
> a generation request goes to them on opening an https page. My machine
> is RHEL 5 (kernel 2.6.18-194) x86_64.
>
>
> Here is my squid conf:
>
>
> http_port 192.168.8.40:3128 ssl-bump generate-host-certificates=on
> dynamic_cert_mem_cache_size=4MB
> cert=/home/talha/squid/www.sample.com.pem
> key=/home/talha/squid/www.sample.com.pem
>

What are your ssl_crtd settings? They should be something like this:

sslcrtd_program /usr/local/libexec/squid/ssl_crtd -s /var/log/squid/ssl_db -M 4MB
sslcrtd_children 32 startup=5 idle=1

depending on the path for the ssl_crtd executable and the directory you want ssl_crtd to use to store the cached certs and metadata.

Hope this helps,
Guy

--------
This message has been scanned by ComplianceSafe, powered by Palisade's PacketSure.
Received on Thu May 03 2012 - 17:05:53 MDT