On 28/04/11 16:25, Amos Jeffries wrote:
On 28/04/11 06:58, Ming Fu wrote:
Hi,
I was trying to investigate if the sslBump problem recently reported
by Will Metcalf is a result of bug 1991 that SSL does not work well
with FreeBSD kqueue.
Hmm, interesting idea. That might be involved.
We have had several independent mentions about the 3.2.0.7 and 3.1.12.1
failure of SslBump. I was thinking it was probably due to the I/O
handling changes we made to CONNECT in those releases.
I am awaiting some kind of fix from someone interested.
For the record the developers working on and with SslBump do not read
this list so everybody who is reporting beta code bugs here (instead of
squid-dev mailing list where such reports are supposed to go) is not
getting anything close to expert attention.
So I tried to test the same setting on a Linux. The system is a
RedHat Fedora 14. Gcc version 4.5.1. 20100924, and OpenSSL 1.0.0d-fips
8 Feb 2011
./configure '--disable-loadable-modules' '--disable-esi'
'--enable-icap_client' '--enable-ssl' '--enable-auth'
'--enable-ssl-crtd' --enable-ltdl-convenience
However I was blocked by the compile error:
make[3]: Entering directory `/home/fming/squid-3.2.0.7/src/ssl'
g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src
-I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments
-Werror -pipe -D_REENTRANT -g -O2 -MT ssl_crtd.o -MD -MP -MF
.deps/ssl_crtd.Tpo -c -o ssl_crtd.o ssl_crtd.cc
In file included from ssl_crtd.cc:9:0:
../../src/ssl/certificate_db.h: In static member function 'static long
unsigned int Ssl::CertificateDb::index_serial_hash_LHASH_HASH(const
void*)':
../../src/ssl/certificate_db.h:113:12: error: duplicate 'const'
../../src/ssl/certificate_db.h:113:12: error: invalid conversion from
'const void*' to 'const char***'
../../src/ssl/certificate_db.h:113:12: error: 'index_serial_hash_hash'
was not declared in this scope
Interesting. This is the compiler complaining about the OpenSSL header
definition of IMPLEMENT_LHASH_HASH_FN.
I'm not sure where these "char***" or double const are coming from. The
Squid definition is char** and the OpenSSL (0.9.8o) macro I can see does
not add any reference or pointer or const to the parameters.
For the record and anyone else hitting this:
http://bugs.squid-cache.org/show_bug.cgi?id=3232
Amos
--
Please be using
Current Stable Squid 2.7.STABLE9 or 3.1.12
Beta testers wanted for 3.2.0.7 and 3.1.12.1
