On 2026-07-14 01:06, Vacheslav wrote:
sudo /usr/libexec/squid/security_file_certgen -c -s
/var/cache/squid/ssl_db/certs -M 4MB
Initialization SSL db...
2026/07/14 07:42:00 sslcrtd_program| FATAL: Cannot generate
certificates: Cannot create /var/cache/squid/ssl_db/certs
exception location: certificate_db.cc(374) Create
/var/cache/squid/ssl_db/certs certs is empty
how to solve the problem?
The FATAL failure you quoted above is probably because "/var/cache/squid
/ssl_db/certs" directory already exists. You should probably remove that
directory (and anything else in "/var/cache/squid/ssl_db") if you want
to re-initialize the certificate database from scratch.
2026/07/14 07:37:49 sslcrtd_program| FATAL: Cannot generate certificates:
Unknown bytes unit: M
This failure is probably a Squid misconfiguration: AFAICT, Certificate
generator shipped with Squid has two parameters that support byte units:
"-b" and "-m". Those parameters support "B", "KB", "MB", "GB" byte units
but not "M".
The generator program name and its parameters are specified using
"sslcrtd_program" directive in "squid.conf". The default uses "-M 4MB"
parameter. I am guessing you have customized that default.
This misconfiguration ought to lead to the following errors (that you
have also seen/shared):
2026/07/14 07:37:49 kid1| WARNING: sslcrtd_program #Hlpr1 exited
2026/07/14 07:37:49 kid1| Too few sslcrtd_program processes are running (need
1/5)
2026/07/14 07:37:49 kid1| FATAL: The sslcrtd_program helpers are crashing too
rapidly, need help!
HTH,
Alex.
_______________________________________________
squid-users mailing list
[email protected]
https://lists.squid-cache.org/listinfo/squid-users