On 2026-07-14 01:06, Vacheslav wrote:
sudo /usr/libexec/squid/security_file_certgen -c -s /var/cache/squid/ssl_db/certs -M 4MB
Initialization SSL db...
2026/07/14 07:42:00 sslcrtd_program| FATAL: Cannot generate certificates: Cannot create /var/cache/squid/ssl_db/certs
     exception location: certificate_db.cc(374) Create

 /var/cache/squid/ssl_db/certs certs is empty

how to solve the problem?

The FATAL failure you quoted above is probably because "/var/cache/squid /ssl_db/certs" directory already exists. You should probably remove that directory (and anything else in "/var/cache/squid/ssl_db") if you want to re-initialize the certificate database from scratch.


 2026/07/14 07:37:49 sslcrtd_program| FATAL: Cannot generate certificates: 
Unknown bytes unit: M

This failure is probably a Squid misconfiguration: AFAICT, Certificate generator shipped with Squid has two parameters that support byte units: "-b" and "-m". Those parameters support "B", "KB", "MB", "GB" byte units but not "M".

The generator program name and its parameters are specified using "sslcrtd_program" directive in "squid.conf". The default uses "-M 4MB" parameter. I am guessing you have customized that default.

This misconfiguration ought to lead to the following errors (that you have also seen/shared):

2026/07/14 07:37:49 kid1| WARNING: sslcrtd_program #Hlpr1 exited
2026/07/14 07:37:49 kid1| Too few sslcrtd_program processes are running (need 
1/5)
2026/07/14 07:37:49 kid1| FATAL: The sslcrtd_program helpers are crashing too 
rapidly, need help!


HTH,

Alex.

_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users

Reply via email to