>If you are using SSL-Bump features, please consider Squid-4 instead

It is not used at all.Squid does not work with ssl. Frontend only


Concerning incorrectly specified options at build

Here on this squid happens the same thing:

* squid3 -v*
*Squid Cache: Version 3.4.8*
* linux*
*configure options:  '--build=x86_64-linux-gnu' '--prefix=/usr'
'--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
'--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--libexecdir=${prefix}/lib/squid3' '--srcdir=.'
'--disable-maintainer-mode' '--disable-dependency-tracking'
'--disable-silent-rules' '--datadir=/usr/share/squid3'
'--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' '--enable-inline'
'--disable-arch-native' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client'
'--enable-follow-x-forwarded-for'
'--enable-auth-basic=DB,fake,getpwnam,LDAP,MSNT,MSNT-multi-domain,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB'
'--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper'
'--enable-auth-ntlm=fake,smb_lm'
'--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,unix_group,wbinfo_group'
'--enable-url-rewrite-helpers=fake' '--enable-eui' '--enable-esi'
'--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--disable-translation'
'--with-swapdir=/var/spool/squid3' '--with-logdir=/var/log/squid3'
'--with-pidfile=/var/run/squid3.pid' '--with-filedescriptors=65536'
'--with-large-files' '--with-default-user=proxy' '--enable-build-info=
linux' '--enable-linux-netfilter' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g
-O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall'
'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-D_FORTIFY_SOURCE=2'
'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat
-Werror=format-security'*


*no out data*


*Connection: 0x7f18ee951c58*
* FD 15, read 10070, wrote 19018*
* FD desc: Reading next request*
* in: buf 0x7f18ee952070, offset 0, size 4096*
* remote: 127.0.0.1:52827 <http://127.0.0.1:52827>*
* local: 127.0.0.1:8080 <http://127.0.0.1:8080>*
* nrequests: 38*
*uri http://icanhazip.com/ <http://icanhazip.com/>*
*logType TCP_MISS*
*out.offset 0, out.size 0*
*req_sz 265*
*entry 0x7f18ee3bc740/F9929050DEE6E67D2DF51EDCBC0CB80F*
*start 1528276856.390709 (2.640371 seconds ago)*
*username*
*delay_pool 0*

*Connection: 0x7f18ee874168*
* FD 13, read 10070, wrote 19018*
* FD desc: Reading next request*
* in: buf 0x7f18ee86bb60, offset 0, size 4096*
* remote: 127.0.0.1:52825 <http://127.0.0.1:52825>*
* local: 127.0.0.1:8080 <http://127.0.0.1:8080>*
* nrequests: 38*
*uri http://icanhazip.com/ <http://icanhazip.com/>*
*logType TCP_MISS*
*out.offset 0, out.size 0*
*req_sz 265*
*entry 0x7f18ee87fde0/560E3AC236A180ECB815B5B41527D2BA*
*start 1528276856.368609 (2.662471 seconds ago)*
*username*


*delay_pool 0*



2018-06-06 7:51 GMT+03:00 Amos Jeffries <squ...@treenet.co.nz>:

> On 06/06/18 07:12, Tiraen wrote:
> > /The second transaction has not yet reached that state despite 81017sec
> > having past.
> > /
> > Thank you for clarification.
> >
> > About squid version
> >
> > /squid -v/
> > /Squid Cache: Version 3.5.27/
> ...
>
> If you are using SSL-Bump features, please consider Squid-4 instead. The
> strangely long timeouts on transactions is likely to be a side effect of
> on old behaviour in Squid-3 seen with transactions that were bumped.
>
>
> > '--enable-ssl'
> > '--with-open-ssl=/etc/ssl/openssl.cnf'
>
> Two problems with the above:
>
>  1) the option name is "--with-openssl".
>
>  2) that option takes the directory PATH where the OpenSSL development
> files were installed. If using the OS provided library package *omit*
> the =PATH portion.
>
>
> Amos
>



-- 
With best regards,

Vyacheslav Yakushev,

Unix system administrator

https://t.me/kelewind
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to