Saving on Squid Proxy Reports: Settings regenerates /var/etc/lightsquid/cert.pem



  • Hi

    Saving on Squid Proxy Reports: Settings regenerates /var/etc/lightsquid/cert.pem

    Which is great but when it does so on my install lightsquid cannot then start as the resulting pem file has this line in it:

    –---END CERTIFICATE----------BEGIN RSA PRIVATE KEY-----

    Rather than

    -----END CERTIFICATE-----
    -----BEGIN RSA PRIVATE KEY-----

    Lighthhtpd cannot parse the former and filas to start.

    Where can I find the code that regenerates this certificate so I can look at fixing it?

    pfSense 2.3.4-RELEASE

    Thanks

    Bails


  • Banned

    Perhaps just fix your WebGUI certificate in cert. manager so than it ends with an empty line? I'm not exactly sure how you managed the above since I in fact have redundant empty lines in the cert. chain, definitely not any missing ones.

    
    -----END CERTIFICATE-----
    
    -----BEGIN CERTIFICATE-----
    
    -----END CERTIFICATE-----
    
    -----BEGIN PRIVATE KEY-----
    
    

    Of course you can add another bunch of \n's in the proper place. Works just fine here without any such stuff.



  • Hi doktornotor

    Good idea. Implemented and it works fine.

    Thanks

    Bails


  • Banned

    You have two certificates there (webGUI + CA), or just one?