Re: [squid-users] HTTPS woes

2017-04-20 Thread Olly Lennox
Olly Lennox Sent: Thursday, 20 April 2017, 1:21 Subject: Re: [squid-users] HTTPS woes On 04/19/2017 05:35 PM, Olly Lennox wrote: > I can confirm that disabling the ssl sesison cache seems to have resolved the > issue. Great! > I found another post which references this patch to resolve t

Re: [squid-users] HTTPS woes

2017-04-19 Thread Alex Rousskov
uid try to create it? Set debug_options to "ALL,3 54,9" and search for "shm_" and "ssl_session_cache" in cache.log for more clues. Alex. > > From: Alex Rousskov > To: "'squid-users@squid-cache. org'"

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
To: "'squid-users@squid-cache. org'" Cc: Olly Lennox Sent: Thursday, 20 April 2017, 0:13 Subject: Re: [squid-users] HTTPS woes On 04/19/2017 04:48 PM, Olly Lennox wrote: > After further investigation the problem is something to do with permissions > related to ssl_c

Re: [squid-users] HTTPS woes

2017-04-19 Thread Alex Rousskov
On 04/19/2017 04:48 PM, Olly Lennox wrote: > After further investigation the problem is something to do with permissions > related to ssl_crtd. No, it is not (or at least not yet). > I can run squid as root but using the default account (proxy?) it > won't run and is giving this error in cache

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
k tel: 07900 648 252 From: Eliezer Croitoru To: "'squid-users@squid-cache. org'" Cc: 'Olly Lennox' ; 'L. P. H. van Belle' Sent: Wednesday, 19 April 2017, 22:24 Subject: RE: [squid-users] HTTPS woes What OS are you using

Re: [squid-users] HTTPS woes

2017-04-19 Thread Eliezer Croitoru
To: Olly Lennox ; L. P. H. van Belle ; squid-users@squid-cache. org Subject: Re: [squid-users] HTTPS woes Sorry it's back, I've narrowed down the problem, hopefully someone can help. When Squid starts it creates the directory /var/run/squid as user proxy:proxy. If I remove this o

Re: [squid-users] HTTPS woes

2017-04-19 Thread Amos Jeffries
On 20/04/17 04:30, Olly Lennox wrote: Sorry it's back, I've narrowed down the problem, hopefully someone can help. When Squid starts it creates the directory /var/run/squid as user proxy:proxy. If I remove this or leave it as is then the application won't launch on subsequent reboots. If I

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
___ From: L. P. H. van Belle To: "squid-users@squid-cache. org" Sent: Wednesday, 19 April 2017, 11:05 Subject: Re: [squid-users] HTTPS woes Hai, Im guess, squid is starting to soon, or there is not /dev/shm Check/Try adding, if not already in /etc/fstab

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
quot;squid-users@squid-cache. org" Sent: Wednesday, 19 April 2017, 12:24 Subject: Re: [squid-users] HTTPS woes Hi Louis, Thanks a lot for the link, I'll implement that once I get this problem fixed. Sadly the change hasn't worked. My current /etc/fstab looks like this

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
0 0 could the existing tmpfs line be causing problems? oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: L. P. H. van Belle To: "squid-users@squid-cache. org" Sent: Wednesday, 19 April 2017, 11:05 Subject: Re: [squid-users] HTTPS woes

Re: [squid-users] HTTPS woes

2017-04-19 Thread L . P . H . van Belle
-users > [mailto:squid-users-boun...@lists.squid-cache.org] Namens Olly Lennox > Verzonden: woensdag 19 april 2017 11:22 > Aan: Amos Jeffries; squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] HTTPS woes > > Thanks Amos, I'll install this. One last question

Re: [squid-users] HTTPS woes

2017-04-19 Thread Olly Lennox
e: Unit entered failed state. Apr 19 10:19:18 raspberrypi systemd[1]: squid.service: Failed with result 'resources'. Any ideas? From: Amos Jeffries To: squid-users@lists.squid-cache.org Sent: Wednesday, 19 April 2017, 5:22 Subject: Re: [squid-

Re: [squid-users] HTTPS woes

2017-04-18 Thread Amos Jeffries
uesday, 18 April 2017, 16:00 *Subject:* Re: [squid-users] HTTPS woes I have automated cron job to refresh Mozilla CA's bundle by monthly basis. Intermediate CA's, however, requires non-scheduled maintenance. I've maintain it by demand. 18.04.2017 20:17, Olly Lennox пишет: Thanks Yuri

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
Would you mind sharing the script you use? oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Yuri Voinov To: Olly Lennox ; "squid-users@lists.squid-cache.org" Sent: Tuesday, 18 April 2017, 16:00 Subject: Re: [squid-users] HTTPS woes I have automated cron job

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri Voinov
- > *From:* Yuri Voinov > *To:* Olly Lennox ; > "squid-users@lists.squid-cache.org" > *Sent:* Tuesday, 18 April 2017, 14:43 > *Subject:* Re: [squid-users] HTTPS woes > > You talked about two different things. > 1. root CA usually built

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
; "squid-users@lists.squid-cache.org" Sent: Tuesday, 18 April 2017, 14:43 Subject: Re: [squid-users] HTTPS woes You talked about two different things. 1. root CA usually built-in in clients. For standalone use, root CA (from Mozilla) usually distributes with openssl distributions. I

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri Voinov
oading all the CA bundles? > > > > > > *From:* Yuri > *To:* Olly Lennox ; > "squid-users@lists.squid-cache.org" > *Sent:* Tuesday, 18 April 2017, 14:03 > *Subject:* Re: [squid-user

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
So anyone who wants to use Squid over HTTPS in the way has to build this repository themselves by manually downloading all the CA bundles?  From: Yuri To: Olly Lennox ; "squid-users@lists.squid-cache.org" Sent: Tuesday, 18 April 2017, 14:03 Subject: Re: [squid-users]

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri
d-cache.org *Sent:* Tuesday, 18 April 2017, 13:51 *Subject:* Re: [squid-users] HTTPS woes Try to specify roots CA bundle/dir explicity by specifying one of this params: # TAG: sslproxy_cafile #file containing CA certificates to use when verifying server #certificates while proxying ht

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
users@lists.squid-cache.org Sent: Tuesday, 18 April 2017, 13:51 Subject: Re: [squid-users] HTTPS woes Try to specify roots CA bundle/dir explicity by specifying one of this params: #  TAG: sslproxy_cafile #    file containing CA certificates to use when verifying server #    certificates

Re: [squid-users] HTTPS woes

2017-04-18 Thread Yuri
___ From: Olly Lennox To: Amos Jeffries ; "squid-users@lists.squid-cache.org" Sent: Sunday, 16 April 2017, 9:31 Subject: Re: [squid-users] HTTPS woes Thanks Amos, it's finally built but I had to disabled ecap, for whatever reason this kept failing (with version 1.0.1 i

Re: [squid-users] HTTPS woes

2017-04-18 Thread Olly Lennox
ying now to configure the ssl stare/peek and will let you know how it goes. Olly oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Amos Jeffries To: squid-users@lists.squid-cache.org Sent: Saturday, 15 April 2017, 23:07 Subject: Re: [squid-users] HTTPS

Re: [squid-users] HTTPS woes

2017-04-16 Thread Olly Lennox
ll let you know how it goes. Olly oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Amos Jeffries To: squid-users@lists.squid-cache.org Sent: Saturday, 15 April 2017, 23:07 Subject: Re: [squid-users] HTTPS woes On 15/04/2017 9:59 a.m., Olly Lennox wrote: > Hi Guys. >

Re: [squid-users] HTTPS woes

2017-04-15 Thread Amos Jeffries
On 15/04/2017 9:59 a.m., Olly Lennox wrote: > Hi Guys. > I'm still struggling with this. I'm trying to build a version of 3.5 but I > just can't get it to work. I'm currently attempting to rebuild the stretch > package with SSL enabled but build keeps failing with the following: > ../../src/ssl/g

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
.squid-cache.org" Sent: Friday, 14 April 2017, 14:07 Subject: Re: [squid-users] HTTPS woes Thanks Rafael, I'm trying this out now, have had to enable the stretch repos but seems to be building! oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Rafael Akchurin To:

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 15/04/2017 12:15 a.m., Olly Lennox wrote: > libtool: install: /usr/bin/install -c squid /usr/sbin/squid So, like I said the binary name is just "squid", not 'squid3' Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.s

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
Thanks Rafael, I'm trying this out now, have had to enable the stretch repos but seems to be building! oli...@lennox-it.uk lennox-it.uk tel: 07900 648 252 From: Rafael Akchurin To: "squid-users@lists.squid-cache.org" Sent: Friday, 14 April 2017, 12:40 Subject: Re: [squ

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
(Sorry, reposted because first email was too big I've edited out some bits) No I'm not getting much luck finding these, This is the result of my make install, has it installed right? result of make - Making all in compat make[1]: Entering directory '/usr/src/squid/squid-3.5.25/compat

Re: [squid-users] HTTPS woes

2017-04-14 Thread Antony Stone
found")? And what do you from "whereis squid"? If that second command shows nothing, what do you get from: "find / -type f -name squid"? Antony. > From: Rafael Akchurin > To: "squid-users@lists.squid-cache.org" > Sent: Friday, 14 April 2017, 12:4

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 11:52 p.m., Olly Lennox wrote: > I've tried building it and it seems to have make install -ed > correctly but I'm getting "command not found" when I try to execute > squid3. Is there a step I'm missing? Debian latest and custom builds use the binary name 'squid' for versions 3.5+. A

Re: [squid-users] HTTPS woes

2017-04-14 Thread Olly Lennox
lists.squid-cache.org" Sent: Friday, 14 April 2017, 12:40 Subject: Re: [squid-users] HTTPS woes >>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version

Re: [squid-users] HTTPS woes

2017-04-14 Thread Rafael Akchurin
>>> Then my config in Squid is like this, the dhparams file I generated as per >>> instructions in the squid wiki: >> First of all: what's Squid's version? > And secondly; are you sufficiently capable with Debian to (cross-)build your > own Squid package that can run on Raspian? > The Debian squ

Re: [squid-users] HTTPS woes

2017-04-14 Thread Amos Jeffries
On 14/04/2017 6:00 a.m., Yuri Voinov wrote: > > > 13.04.2017 22:57, Olly Lennox пишет: >> Hi There, >> >> I've been battling for the last few days on a little project to setup a >> Raspberry PI device as a small parental blocking server. I've managed to >> configure the device to work as a tran

Re: [squid-users] HTTPS woes

2017-04-13 Thread Yuri Voinov
13.04.2017 22:57, Olly Lennox пишет: > Hi There, > > I've been battling for the last few days on a little project to setup a > Raspberry PI device as a small parental blocking server. I've managed to > configure the device to work as a transparent proxy using squid which is > assigned as the d

[squid-users] HTTPS woes

2017-04-13 Thread Olly Lennox
Hi There, I've been battling for the last few days on a little project to setup a Raspberry PI device as a small parental blocking server. I've managed to configure the device to work as a transparent proxy using squid which is assigned as the default gateway via DHCP and after a lot of messing