Re: [squid-users] Squid with MySQL auth not denying pages with

2017-04-26 Thread prashantbhosale
Thanks Amos for reply!!! >>On 27/04/17 00:04, prashantbhosale wrote: >> I am setting up simple squid server for denying URL's. Below is my squid >> config, URL's are getting blocked and TCP_DENIED/403 seen in access.log >> file. >> But not showing error message/page shown in browser. >> >> Anothe

Re: [squid-users] Huge memory required for squid 3.5

2017-04-26 Thread Alex Rousskov
On 04/26/2017 09:35 AM, Yuri Voinov wrote: > This is openssl issue or squid's? AFAIK, the underlying issue (i.e., bug #4005) is mostly a Squid problem: Squid is caching SSL contexts (instead of certificates) and does a poor job maintaining that cache. Earlier OpenSSL versions (that had to be use

Re: [squid-users] Huge memory required for squid 3.5

2017-04-26 Thread Yuri Voinov
26.04.2017 21:47, Amos Jeffries пишет: > On 27/04/17 03:35, Yuri Voinov wrote: >> Amos, stupid question. >> >> Why sessions can't share CA's data cached in memory? shared_ptr invented >> already. >> >> This is openssl issue or squid's? > > It is in OpenSSL. We use shared_ptr etc in Squid for the

Re: [squid-users] Huge memory required for squid 3.5

2017-04-26 Thread Amos Jeffries
On 27/04/17 03:35, Yuri Voinov wrote: Amos, stupid question. Why sessions can't share CA's data cached in memory? shared_ptr invented already. This is openssl issue or squid's? It is in OpenSSL. We use shared_ptr etc in Squid for the things we are responsible for. Amos ___

Re: [squid-users] Huge memory required for squid 3.5

2017-04-26 Thread Yuri Voinov
Amos, stupid question. Why sessions can't share CA's data cached in memory? shared_ptr invented already. This is openssl issue or squid's? 26.04.2017 9:08, Amos Jeffries пишет: > On 26/04/17 10:53, Yuri Voinov wrote: >> Ok, but how NO_DEFAULT_CA should help with this? > > It prevents OpenSSL co

Re: [squid-users] Squid with MySQL auth not denying pages with

2017-04-26 Thread Amos Jeffries
On 27/04/17 00:04, prashantbhosale wrote: I am setting up simple squid server for denying URL's. Below is my squid config, URL's are getting blocked and TCP_DENIED/403 seen in access.log file. But not showing error message/page shown in browser. Another main task that I want to do is Squid authe

[squid-users] Squid with MySQL auth not denying pages with

2017-04-26 Thread prashantbhosale
I am setting up simple squid server for denying URL's. Below is my squid config, URL's are getting blocked and TCP_DENIED/403 seen in access.log file. But not showing error message/page shown in browser. Another main task that I want to do is Squid authentication with MySQL. Followed the instruct

Re: [squid-users] Huge memory required for squid 3.5

2017-04-26 Thread Sabu Thaliyath
Hi, I have the same issue as Nil. I have set No_DEFAULT_CA and also did "generate-host-certificates=off". I see with these changes it takes more time reach 2GB but it does reach there (in about 6 hours for me with peak usage). These were my settings. https_port 192.168.0.10:3129 generate-host-c