-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The point following. OpenSSL itself contains CAs derived from Mozilla bundle. This CA bundle is NOT complete and NOT contains most intermediate certificates. I was forced to find and install over 40 CA's. In particular, Symantec intermediate and root CA is completely absent in Mozilla bundle, and, following, in OpenSSL. So, you can't bump Symantec updates and some Twitter services (yes, it protected by Symantec CA's) without it. Also, some CA chains will not work if your don't add some certs. Finally - finding and install required CA's is your responsibility. The bump can't performing well without most used CA's. 31.01.2015 2:16, HackXBack пишет: > Dear Amos , > please answer me because crashing increased , now it happen every hour, so > every hour i need to delete old ssl db and create new one then restart squid > to make it works !! > how i can tune this issue to solve it i need you in this bug, > Thanks Mate. > > > > -- > View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/FATAL-The-ssl-crtd-helpers-are-crashing-too-rapidly-need-help-tp4669257p4669447.html > Sent from the Squid - Users mailing list archive at Nabble.com. > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJUy+t2AAoJENNXIZxhPexG478H/AwdEGaqkowsjoN7q2ffe9Sp HFc+oYiP9aJx2O9V2AB0+hkB+Lk/s9x2K2pVo+i8NhtWnUbJlvqqNoAeNvFfFCw1 UgYbNxqaVPxHCluYbPWCNCF3KhC7mP1fwGmluEtVjymNWqN5bKJABN/30CFjAJk9 Xkke6TwMbFT8akfSgJ+kZeiBLEl40TjLGrAfn5ul8UYrUCSyRjZ4LMXkqyqmWYBL yc8pY5WPngnRkKsnHJ/olgLe4e8Q3S6EHtzULg59s7+jsPm4r2XS2SbMOLF6wfKM vJi/yzB3v7Ks/JcC+PI7FyvKccpU4Urriv32+SXtQTk+aQkKsWQFc9yO/a46QU0= =jyl+ -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users