Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Jonathan Lee
It works in 5.8 with no errors however in 6.6 I can see indexing and other information that I have never seen before realted to my cache and this new TLS error that follows your thought process you listed before with OpenSSL ERROR: failure while accepting a TLS connection on conn367 local=192.1

Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Jonathan Lee
Copy of config I am using # This file is automatically generated by pfSense # Do not edit manually ! http_port 192.168.1.1:3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=20MB cert=/usr/local/etc/squid/serverkey.pem cafile=/usr/local/share/certs/ca-root-nss.crt capath=/

Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Jonathan Lee
I think they also did fail silently in the older version because the error logs were not present for previous packages that I used. At one point all error logs were removed in a package and I had to create a linker file to see the basic errors. Squid 6.6 comes with the error logs I could not see

Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Alex Rousskov
On 2024-04-10 16:22, Jonathan Lee wrote: Could it be related to this ?? "WARNING: Failed to decode EC parameters '/etc/dh-parameters.2048'. error:1E08010C:DECODER routines::unsupported” I do not know the answer to your question. I speculate that it could be related: Depending on various fact

Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Jonathan Lee
Could it be related to this ?? "WARNING: Failed to decode EC parameters '/etc/dh-parameters.2048'. error:1E08010C:DECODER routines::unsupported” > On Apr 10, 2024, at 08:38, Alex Rousskov > wrote: > > On 2024-04-10 10:50, Jonathan Lee wrote: > >> I am getting the following error in 6.6 afte

Re: [squid-users] [External] squid-users Digest, Vol 116, Issue 7

2024-04-10 Thread Francesco Chemolli
Have you checked https://www.squid-cache.org/Doc/config/logformat/ ? There is a note about "logformat referrer", it should be what you are looking for On Wed, Apr 10, 2024 at 10:16 PM Bobby Matznick wrote: > Question about squid, Debian version 4.13. Looking for a way to log > referer’s. I see t

Re: [squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Alex Rousskov
On 2024-04-10 10:50, Jonathan Lee wrote: I am getting the following error in 6.6 after a upgrade from 5.8 does anyone know what this is caused by? SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR $ openssl errstr A000417 error:0A000417:SSL routines::sslv3 alert illegal parameter

Re: [squid-users] [External] squid-users Digest, Vol 116, Issue 7

2024-04-10 Thread Bobby Matznick
Question about squid, Debian version 4.13. Looking for a way to log referer's. I see the way that worked up until version 4, seems this does not work anymore. I'm having some trouble finding if anything replaced it or if there's another way to go about this? Here is the old way. referrer_log /pa

[squid-users] SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR

2024-04-10 Thread Jonathan Lee
Hello fellow Squid Proxy Users can you please help I am getting the following error in 6.6 after a upgrade from 5.8 does anyone know what this is caused by? SQUID_TLS_ERR_ACCEPT+TLS_LIB_ERR=A000417+TLS_IO_ERR After it says kick abandoned this if for bumped clients with certificates Jonathan