Squid PHP error after upgrade to pfsense 2.5

[Alexandru Luca]

Hello,

Long story told short:

I had pfsense 2.4 running smooth with SQUID transparent proxy for three days, after that SQUID suddenly stopped intercepting traffic. I thought it was the cache folder which was full. So I went on deleting the cache folder and then recreate it. On reboot, pfsense started to give me a lot of php error messages and wouldn't start the WebGUI service anymore. I have upgraded from command line with pfsense -upgrade but this hasn't fixed the issue. I then went on doing a package update and upgrade with pkg update/ upgrade and after the reboot WebGUI started again and I was able to uninstall both SQUID and SQUID Guard and then reinstall them again. Problem is SQUID still doesn't work and it gives me this php errors:

Crash report begins. Anonymous machine information:

amd64
12.0-RELEASE-p3
FreeBSD 12.0-RELEASE-p3 da872a8c2a5(RELENG_2_5) pfSense

Crash report details:

PHP Errors:
[26-Mar-2019 16:19:18 Etc/GMT+2] PHP Warning: chown(): No such file or directory in /usr/local/pkg/squid.inc on line 104
[26-Mar-2019 16:19:18 Etc/GMT+2] PHP Warning: chgrp(): No such file or directory in /usr/local/pkg/squid.inc on line 105
[26-Mar-2019 16:19:18 Etc/GMT+2] PHP Warning: opendir(/var/squid/lib/ssl_db): failed to open dir: No such file or directory in /usr/local/pkg/squid.inc on line 106
[26-Mar-2019 17:11:56 Etc/GMT+2] PHP Warning: chown(): No such file or directory in /usr/local/pkg/squid.inc on line 104
[26-Mar-2019 17:11:56 Etc/GMT+2] PHP Warning: chgrp(): No such file or directory in /usr/local/pkg/squid.inc on line 105
[26-Mar-2019 17:11:56 Etc/GMT+2] PHP Warning: opendir(/var/squid/lib/ssl_db): failed to open dir: No such file or directory in /usr/local/pkg/squid.inc on line 106

No FreeBSD crash data found.

I have noticed that SQUID package was upgraded to version 4.1_1 from 3.5.27_3.

Any thoughts on this? Can anyone provide me with some troubleshooting ideas?

Thank you

[Grimson]

https://forum.netgate.com/topic/141672/2-5-0-development-snapshots-are-now-live/9

@Alexandru-Luca said in Squid PHP error after upgrade to pfsense 2.5:

Any thoughts on this? Can anyone provide me with some troubleshooting ideas?

You do understand that 2.5 is in a very early development stage and will break often. Report bugs by following the instructions in the post above, but do not use 2.5 in production or rely on it.

[Alexandru Luca]

Well yes, I was aware of that and I also was forced to update to make the WebGUI work. Nevertheless if no solution is found I will reinstall pfsense.

Thank you!

[Alexandru Luca]

@Grimson I noticed I had mentioned pfsense 2.5 instead of 2.4. After I have upgraded pfsense the version changed to the devel 2.5 version. I have corrected the initial post. Sorry

[Grimson]

@Alexandru-Luca said in Squid PHP error after upgrade to pfsense 2.5:

Well yes, I was aware of that and I also was forced to update to make the WebGUI work.

You were force to update to 2.5 for the WebUI to work, I doubt that. Use 2.4.4p2 as your main firewall for now, and experiment with 2.5 in a VM.

@Alexandru-Luca said in Squid PHP error after upgrade to pfsense 2.5:

After I have upgraded pfsense the version changed to the devel 2.5 version.

Then you must have switched to the devel branch, pfSense doesn't do that by itself. Use a config backup from 2.4 and reinstall with 2.4.4p2.

[Alexandru Luca]

Thank you for your time. I have reinstalled pfsense 2.4.4p2 and all works.

[spyd3rweb]

Had a similar issue after upgrading, this command removed the error during squid service restart:

/usr/local/libexec/squid/security_file_certgen -c -s /var/squid/lib/ssl_db -M 4MB
chown -R squid /var/squid/lib/ssl_db/
chgrp -R proxy /var/squid/lib/ssl_db/

References:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Uninitialized-SSL-certificate-database-directory-td4686306.html
https://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit