Index: Makefile.inc
===================================================================
RCS file: /cvs/ports/www/squid/Makefile.inc,v
retrieving revision 1.9
diff -u -p -r1.9 Makefile.inc
--- Makefile.inc        15 May 2014 21:24:33 -0000      1.9
+++ Makefile.inc        5 Dec 2014 13:54:30 -0000
@@ -66,6 +66,7 @@ CONFIGURE_ARGS+= ${CONFIGURE_SHARED} \
                --enable-referer-log \
                --enable-removal-policies="lru heap" \
                --enable-ssl \
+               --enable-ssl-crtd \
                --with-openssl \
                --enable-storeio="aufs ufs diskd" \
                --with-default-user="_squid" \



because, why not ?

# ./squid-3.4.6/build-amd64/src/ssl/ssl_crtd -h
usage: ssl_crtd -hv -s ssl_storage_path -M storage_max_size
        -h                   Help
        -v                   Version
        -s ssl_storage_path  Path to specific disk storage of ssl server
                             certificates.
        -M storage_max_size  max size of ssl certificates storage.
        -b fs_block_size     File system block size in bytes. Need for
processing
                             natural size of certificate on disk.
Default value is
                             2048 bytes.

After running write requests in the next format:
<request code><whitespace><body_len><whitespace><body>
There are two kind of request now:
new_certificate 13 host=host.dom
        Create new private key and selfsigned certificate for "host.dom".
new_certificate xxx host=host.dom
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
        Create new private key and certificate request for "host.dom"
        Sign new request by received certificate and private key.
usage: ssl_crtd -c -s ssl_store_path
        -c                   Init ssl db directories and exit.





-- 
---------------------------------------------------------------------------------------------------------------------
() ascii ribbon campaign - against html e-mail
/\

Reply via email to