5

I am doing R&D to configure Squid as HTTP and HTTPS Transparent proxy.

After some research I have configured squid HTTP and HTTPS transparent proxy and tried to start the squid but my bad luck  I am getting Fatal error when squid starts.

Here is more description about my issue,

Issue Description: I have installed and configured squid3.3.4 in Debian machine. To enable squid as HTTPS transparent proxy I used public signed certificate(from Godaddy) and configured the same in squid.conf file. Once the configuration done I have tried to start the squid but while starting the squid I am getting the following error.

Error: FATAL: No valid signing SSL certificate configured for https_port 0.0.0.0:3129 Squid Cache (Version 3.3.4): Terminated abnormally. CPU Usage: 0.020 seconds = 0.000 user + 0.020 sys Maximum Resident Size: 22416 KB Page faults with physical i/o: 3 failed!

Note: The certificate and private key(which is configured in squid.conf) has been converted from tomcat keystore(Godaddy certificate) file. Squid version: 3.3.4

Someone please help me with the issue.

Here is HTTPS transparent proxy configuration in squid.conf:

http_port 3127

http_port 3128 intercept

https_port 3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid3/cert/squidtrans.pem 

key=/etc/squid3/cert/squidtrans.key

ssl_bump server-first all

sslcrtd_program /usr/lib/squid3/ssl_crtd -s /var/lib/ssl_db -M 4MB

sslcrtd_children 8 startup=1 idle=1

Thanks in Advance.

CinCout
  • 9,486
  • 12
  • 49
  • 67
Anitha M
  • 51
  • 1
  • 2

0 Answers0