Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-20 Thread Veiko Kukk
On 20/05/15 14:06, Amos Jeffries wrote: Ouch, sorry. Maybe this will work: sslcrtd_children 1 startup=0 Otherwise you are left with re-building Squid. --disable-ssl-crtd would do if you never want to use the helper. Or the patch now applied on Squid-4 (

Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-20 Thread Amos Jeffries
On 19/05/2015 10:43 p.m., Veiko Kukk wrote: > On 18/05/15 15:28, Amos Jeffries wrote: >> Having a directive commented out means the default value for it is used. >> There is a default helper built by --enable-ssl-crtd that gets used >> unless you specify otherwise. >> >> Currently Squid is not dete

Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-19 Thread Veiko Kukk
On 18/05/15 15:28, Amos Jeffries wrote: Having a directive commented out means the default value for it is used. There is a default helper built by --enable-ssl-crtd that gets used unless you specify otherwise. Currently Squid is not detecting that the helper is unused, so checks for its existen

Re: [squid-users] Squid 3.4.10 and sslcrtd

2015-05-18 Thread Amos Jeffries
On 18/05/2015 11:23 p.m., Veiko Kukk wrote: > Hi > > I'd like to know if I understand Squid documentation properly. > I have following http_port and sslbump configuration: > > http_port 127.0.0.1:3128 ssl-bump generate-host-certificates=off > cert=/var/spool/squid/ssl_cert/squid_ca.pem > ssl_bump

[squid-users] Squid 3.4.10 and sslcrtd

2015-05-18 Thread Veiko Kukk
Hi I'd like to know if I understand Squid documentation properly. I have following http_port and sslbump configuration: http_port 127.0.0.1:3128 ssl-bump generate-host-certificates=off cert=/var/spool/squid/ssl_cert/squid_ca.pem ssl_bump server-first all From documentation: generate-host-cert