[squid-users] Accelerating Outlook Web Access with SQUID/SSL

From: Don Pandori <dpandori@dont-contact.us>
Date: Mon, 20 Oct 2003 15:20:26 -0500

Hi,

I've gone through the archives and have my 3.0Pre3<latestbuild> compiled and
configured to accelerate OWA.

I'm using self-signed certs (for testing at this point) and when I fire squid
up, it asks for the PEM passphrase, I enter it and then it dies without
logging anything. I took out the https_port directive and it fires up just
fine, though I can't use it for what I originally wanted.

Here is the config that I'm using:

https_port 443 defaultsite=the.webserver.com
cert=/opt/squid/etc/ssl/newcert.pem key=/opt/squid/etc/ssl/newreq.pem

cache_peer xxx.xxx.xxx.xx parent 80 0 no-query originserver login=PASS
front-end-https=auto

...

acl my_servers dstdomain the.external.domainname
http_access allow my_servers

I turned up debugging and the output is below.

Any hints would be greatly appreciated.

Thanks,

Don

*** debug output below ***

[root@testweb etc]# ../sbin/squid
2003/10/20 15:23:20| Initialising SSL.
2003/10/20 15:23:20| Using certificate in /opt/squid/etc/ssl/newcert.pem
2003/10/20 15:23:20| Using private key in /opt/squid/etc/ssl/newreq.pem
Enter PEM pass phrase:
2003/10/20 15:23:23| Error error setting CA certificate locations:
error:00000000:lib(0):func(0):reason(0)
2003/10/20 15:23:23| continuing anyway...
2003/10/20 15:23:23| Cache dir '/opt/squid/var/cache' size changed to 102400 KB
2003/10/20 15:23:23.967| aclParseAclLine: Creating ACL 'all'
2003/10/20 15:23:23.968| aclParseAclLine: Creating ACL 'manager'
2003/10/20 15:23:23.968| aclParseAclLine: Creating ACL 'localhost'
2003/10/20 15:23:23.969| aclParseAclLine: Creating ACL 'to_localhost'
2003/10/20 15:23:23.969| aclParseAclLine: Creating ACL 'SSL_ports'
2003/10/20 15:23:23.969| aclParseAclLine: Creating ACL 'Safe_ports'
2003/10/20 15:23:23.970| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.970| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.970| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.970| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.971| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.971| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.971| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.971| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.972| aclParseAclLine: Appending to 'Safe_ports'
2003/10/20 15:23:23.972| aclParseAclLine: Creating ACL 'CONNECT'
2003/10/20 15:23:23.972| aclParseAclLine: Creating ACL 'my_servers'
2003/10/20 15:23:23.973| aclParseAccessLine: looking for ACL name 'manager'
2003/10/20 15:23:23.973| aclParseAccessLine: looking for ACL name 'localhost'
2003/10/20 15:23:23.973| aclParseAccessLine: looking for ACL name 'manager'
2003/10/20 15:23:23.974| aclParseAccessLine: looking for ACL name 'Safe_ports'
2003/10/20 15:23:23.974| aclParseAccessLine: looking for ACL name 'CONNECT'
2003/10/20 15:23:23.974| aclParseAccessLine: looking for ACL name 'SSL_ports'
2003/10/20 15:23:23.974| aclParseAccessLine: looking for ACL name 'my_servers'
2003/10/20 15:23:23.975| aclParseAccessLine: looking for ACL name 'all'
2003/10/20 15:23:23.975| aclParseAccessLine: looking for ACL name 'all'
2003/10/20 15:23:23.975| aclParseAccessLine: looking for ACL name 'all'
2003/10/20 15:23:23.978| aclParseAccessLine: looking for ACL name 'all'
2003/10/20 15:23:23.978| Initialising SSL.
2003/10/20 15:23:23.978| Error error setting CA certificate locations:
error:00000000:lib(0):func(0):reason(0)
2003/10/20 15:23:23.978| continuing anyway...
2003/10/20 15:23:24.012| cachemgrRegister: registered config
2003/10/20 15:23:24.014| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.015| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.015| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.015| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.015| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.016| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.016| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.016| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.016| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.016| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.017| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.017| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.017| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.017| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.017| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.018| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.018| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.018| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.018| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.018| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.019| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.019| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.019| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.019| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.019| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.020| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.020| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.020| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.020| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.020| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.021| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.021| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.021| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.021| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.021| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.022| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.022| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.022| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.022| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.022| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.023| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.023| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.023| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.023| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.023| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.024| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.024| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.024| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.024| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.024| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.025| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.025| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.025| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.025| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.025| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.026| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.026| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.026| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.026| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.026| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.027| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.027| ACL::Prototype::~Prototype: TODO: unregister me
2003/10/20 15:23:24.027| aclDestroyAcls: '(null)'
2003/10/20 15:23:24.027| ACL::Prototype::~Prototype: TODO: unregister me
[root@testweb etc]
Received on Mon Oct 20 2003 - 13:20:28 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:20:33 MST