Re: [squid-users] SIGBUS attempting to use rock

2019-10-17 Thread Antonio SJ Musumeci
On 10/17/2019 5:47 PM, Alex Rousskov wrote: Unfortunately, a simple implementation may produce a lot of false warnings in some environments while a quality implementation may not be as easy as you think: Accessing free space info may require special permissions and correctly accounting for the ex

Re: [squid-users] SIGBUS attempting to use rock

2019-10-17 Thread Alex Rousskov
On 10/17/19 5:07 PM, Antonio SJ Musumeci wrote: > the option is listed in relation to SMP and not referenced by rock docs. The second paragraph in cache_dir rock directive documentation implies SMP -- it talks about various processes that rock uses to avoid locking (if it can). SMP usage is the p

Re: [squid-users] SSL negotiation errors on https_port

2019-10-17 Thread Alex Rousskov
On 10/17/19 4:52 PM, Robert wrote: > I see many lines like these in the cache.log file: > 2019/10/17 22:38:33.552 kid1| Error negotiating SSL connection on FD 44: > error:0001:lib(0):func(0):reason(1) (1/-1) OpenSSL refused to accept a TLS client connection with a generic SSL_ERROR_SSL:

Re: [squid-users] SIGBUS attempting to use rock

2019-10-17 Thread Antonio SJ Musumeci
I'm currently unable to test fully due to my environment lacking CAP_IPC_LOCK. It does fail more gracefully saying it can't use mlock at all. That said... the option is listed in relation to SMP and not referenced by rock docs. Also it should be possible to check /dev/shm's free space and comp

[squid-users] SSL negotiation errors on https_port

2019-10-17 Thread Robert
Hi there, I have configured squid's https_port for client certificate authorization: https_port [2001:XXX:XX:XXX::2]:8008 cert=/etc/ssl/private/mydomain_de/mydomain_de.crt key=/etc/ssl/private/mydomain_de/mydomain_de.key clientca=/etc/squid/ssl-proxy/ca.crt tls-dh=/etc/squid/ssl/dh_2048.pem T

Re: [squid-users] SIGBUS attempting to use rock

2019-10-17 Thread Alex Rousskov
On 10/17/19 12:28 PM, Antonio SJ Musumeci wrote: > After a lot of tinkering and turning on full debug I realized the reason > rock was failing for me in my container was due to the small default SHM > size allocated by Docker. Increasing the SHM size with `--shm-size` > fixed the issue. > > It'd

[squid-users] SIGBUS attempting to use rock

2019-10-17 Thread Antonio SJ Musumeci
I'm sending this out for those that might run into this in the future. After a lot of tinkering and turning on full debug I realized the reason rock was failing for me in my container was due to the small default SHM size allocated by Docker. Increasing the SHM size with `--shm-size` fixed the

Re: [squid-users] How to use "cache", "store_miss" and "send_hit" directives?

2019-10-17 Thread Robert
Am Mittwoch, den 16.10.2019, 22:18 -0400 schrieb Alex Rousskov: > On 10/16/19 7:17 PM, Robert Senger wrote: > > > I need to encrypt browser->squid connection (on mobile devices). > > With > > squid 3.x, I used stunnel client on the mobile device and stunnel > > server on squid's machine. With squi

Re: [squid-users] Overwrite an URL containing an IP when it is requested with a custom Host header

2019-10-17 Thread Amos Jeffries
On 17/10/19 11:33 pm, jl wrote: > Thanks both for your replies. > Or for this: curl -v -k -x IP:PORT http://192.121.151.106/doc/search/ -H "Host: erlang.org" to return "HTTP/1.1 200 OK" instead of "HTTP/1.1 404 Not Found" > > >> That one is not a good idea. The origin

Re: [squid-users] Overwrite an URL containing an IP when it is requested with a custom Host header

2019-10-17 Thread jl
Thanks both for your replies. >>> Or for this: >>> curl -v -k -x IP:PORT http://192.121.151.106/doc/search/ -H "Host: >>> erlang.org" >>> >>> to return "HTTP/1.1 200 OK" instead of "HTTP/1.1 404 Not Found" > >That one is not a good idea. The origin server is producing that 404, >nothing to d

[squid-users] Fwd: 407 error

2019-10-17 Thread Nandha Kumar
Hi Team, WE are using the squid proxy on Ubuntu. WE are facing a strange error when try to community through proxy. I am able to access the proxy in the server browser suing the username and password. When I try to push/enable an module throw the proxy we are getting the error message 156888665

Re: [squid-users] Overwrite an URL containing an IP when it is requested with a custom Host header

2019-10-17 Thread Amos Jeffries
On 17/10/19 7:20 am, Alex Rousskov wrote: > On 10/16/19 1:12 PM, jl wrote: > >> It's possible to configure Squid to overwrite an URL containing an IP when >> it is requested with a custom Host header passed by the client when the Host >> header resolves to the IP in the URL? > > You can probably