Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid 3.3.4 package for pfsense with ssl filtering

    Scheduled Pinned Locked Moved Cache/Proxy
    305 Posts 72 Posters 302.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stanthewizard
      last edited by

      I got this when I start Squid (that stops immediatly)

      Jun 6 19:56:59 squid: No valid signing SSL certificate configured for https_port 127.0.0.1:443
      Jun 6 19:57:04 php: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2013/06/06 19:56:59| ERROR: Directive 'ignore_expect_100' is obsolete. FATAL: No valid signing SSL certificate configured for https_port 127.0.0.1:443 Squid Cache (Version 3.3.5): Terminated abnormally. CPU Usage: 0.013 seconds = 0.000 user + 0.013 sys Maximum Resident Size: 34816 KB Page faults with physical i/o: 0'
      Jun 6 19:57:06 squid: No valid signing SSL certificate configured for https_port 127.0.0.1:443

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        @stanthewizard:

        I got this when I start Squid (that stops immediatly)

        What config are you using? reverse proxy? normal proxy? did you configured a valid CA for squid?

        While using transparent proxy, do not select loopback interface.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • S
          stanthewizard
          last edited by

          I have removed 3.3.4

          I followed your commands line for 3.3.5. But no squid … after reinstallation, I'll see if I still have the error message.

          Thanks for your help

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @stanthewizard:

            I followed your commands line for 3.3.5. But no squid … after reinstallation, I'll see if I still have the error message.

            fill ssl fields (port, etc) and save config.

            check if all libs are there with squid -v

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S
              stanthewizard
              last edited by

              I don't understand
              squid -v give me a lot of file.

              but no squid in menu or packages  :-X

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @stanthewizard:

                I don't understand
                squid -v give me a lot of file.

                but no squid in menu or packages  :-X

                The upgrade process from 3.3.4 to 3.3.5 is only on console. You do not need to remove squid3-dev package on gui.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • S
                  stanthewizard
                  last edited by

                  Damned

                  How do I reinstall the console ?

                  Thanks

                  1 Reply Last reply Reply Quote 0
                  • S
                    stanthewizard
                    last edited by

                    On one of the Pfsense 2.1RC0 … I nailed the SSL Certificat culprit.
                    The service is UP with this in the log:

                    php: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2013/06/07 08:02:02| ERROR: Directive 'ignore_expect_100' is obsolete. squid: No running copy'

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @stanthewizard:

                      How do I reinstall the on console ?

                      Reinstall package squid3-dev via gui.

                      Go to console/ssh, remove with pkg_delete squid-3.3.4 and install using pkg_add squid-3.3.5.

                      @stanthewizard:

                      ERROR: Directive 'ignore_expect_100' is obsolete. squid: No running copy'

                      I've pushed a fix with no version bump. a package reinstall should fix it.

                      If you what to just manual update it, run these two fetch cmd on console

                      fetch -o /usr/local/pkg/squid_reverse.inc https://raw.github.com/pfsense/pfsense-packages/8ba97bb7780495943c2d50547514d5b388d06329/config/squid3/33/squid_reverse.inc
                      fetch -o /usr/local/pkg/squid_reverse_general.xml https://raw.github.com/pfsense/pfsense-packages/8ba97bb7780495943c2d50547514d5b388d06329/config/squid3/33/squid_reverse_general.xml
                      

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • S
                        stanthewizard
                        last edited by

                        Aouch

                        with pkg_add

                        pkg_add: can't stat package file 'squid-3.3.5'

                        :-\

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @stanthewizard:

                          pkg_add: can't stat package file 'squid-3.3.5'

                          white url are you using to fetch squid 3.3.5?

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • S
                            stanthewizard
                            last edited by

                            sorry I don't understand

                            I think I have no specific url

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @stanthewizard:

                              sorry I don't understand

                              On console/ssh use  pkg_delete to remove squid-3.3.4 and pkg_add to get squid 3.3.5

                              i386 systems
                              pkg_add -r http://e-sac.siteseguro.ws/packages/8/All/squid-3.3.5.tbz

                              amd64 systems
                              pkg_add -r http://e-sac.siteseguro.ws/packages/amd64/8/All/squid-3.3.5.tbz

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • S
                                stanthewizard
                                last edited by

                                OK

                                I installed it … but nothing in the GUI packages ...

                                Did I do something wrong ?

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @stanthewizard:

                                  Did I do something wrong ?

                                  You forgot to install squid3-dev package before doing pkgdell/add on console.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    stanthewizard
                                    last edited by

                                    At last It works

                                    Thanks

                                    BTW
                                    with squid 3.3.5 there is a bug in 2.1 RC0 … endless loop updating package

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @stanthewizard:

                                      At last It works

                                      Thanks

                                      BTW
                                      with squid 3.3.5 there is a bug in 2.1 RC0 … endless loop updating package

                                      During firmware upgrade?

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        stanthewizard
                                        last edited by

                                        At reboot

                                        Warning about package updating …. endlessly

                                        1 Reply Last reply Reply Quote 0
                                        • Q
                                          quetzalcoatl
                                          last edited by

                                          I always use the latest snapshot, install new 64 bit snapshot every week during the night when no client of mine browses the internet.

                                          I also install squid 3.3.5 package or whatever is the latest.

                                          I never install squidguard or any other package. The absolutely only package i have installed is squid 3.3.x

                                          Following marcello instructions i got some caching, but it's a ridiculous 1% byte hit ratio. Most of the windows updates are not cache anymore.(maybe they are stored into cache but not server, or not even stored at all).

                                          Also there are some pages that get updated daily and squid does not detect the update.

                                          www.filehippo.com  and  www.jalopnik.com  are 2 of the pages that i noticed that squid does not detect that they have been updated…..
                                          Sometimes even a week later squid is showing me the week old page, and both filehippo and jalopnik update daily.

                                          The only way to see those updated pages is turning the squid service off.

                                          There is an option with a checkbox that says "Enable offline mode" and i keep that off otherwise squid will never check tons of page updates.
                                          Enable offline mode is off in my squid.

                                          I always do have some custom refresh options in the "custom options" field.....but even if i leave that field empty, save and restart the whole pfsense machine, i never get a decent hit ratio or byte hit ratio.

                                          I don't even ask for youtube caching because i know it's hard and complicated, but at least some caching like before with ms windows updates, ms office updates, and exe files caching.

                                          I used to be able to download the winrar, winamp, VLC player and more files at 180 mb/s using older squids (when it was already downloaded once).

                                          Now with 3.3.x i never get the cached file, it always starts downloading again at 24kb/s........

                                          Am I the only one with this issue? what am i doing wrong?

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @quetzalcoatl:

                                            Am I the only one with this issue? what am i doing wrong?

                                            Did you disabled dynamic content? This behavior/issue happens when its enabled.

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.