On 20/12/2016 2:06 a.m., Eliezer Croitoru wrote: > Did you noticed these errors: > FATAL: The ssl_crtd helpers are crashing too rapidly, need help! > Unfortunately that helper does not have much debug to figure out why its crashing. There are a couple of bug reports open about this crashing, but only after its been running a while in some past execution. The current workaround seems to be erasing the cert DB it uses and re-generating it. Any help debugging that would be very welcome. > Squid Cache (Version 3.5.23): Terminated abnormally. > CPU Usage: 63.837 seconds = 28.308 user + 35.529 sys > Maximum Resident Size: 171488 KB > Page faults with physical i/o: 154 > 2016/12/18 17:25:05| Set Current Directory to /opt/squid-3.5/var/logs/ > 2016/12/18 17:25:06| Starting Squid Cache version 3.5.23 for i386-unknown-freebsd9.3... > 2016/12/18 17:25:06| Service Name: squid > 2016/12/18 17:25:06| Process ID 2943 > 2016/12/18 17:25:06| Process Roles: master worker > 2016/12/18 17:25:06| NOTICE: Could not increase the number of filedescriptors > 2016/12/18 17:25:06| With 32768 file descriptors available > 2016/12/18 17:25:06| Initializing IP Cache... > 2016/12/18 17:25:06| DNS Socket created at [::], FD 10 > 2016/12/18 17:25:06| DNS Socket created at 0.0.0.0, FD 11 > 2016/12/18 17:25:06| Adding domain crownkenya.com from /etc/resolv.conf > 2016/12/18 17:25:06| Adding nameserver 192.168.55.254 from /etc/resolv.conf > 2016/12/18 17:25:06| helperOpenServers: Starting 5/15 'ssl_crtd' processes > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| helperOpenServers: Starting 5/10 'perl' processes > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:06| WARNING: no_suid: setuid(0): (1) Operation not permitted > 2016/12/18 17:25:11| Logfile: opening log stdio:/opt/squid-3.5/var/logs/access.log > > ???? > And it's good to know you are running FreeBSD 9.3...(32 bit..) > > You need to fix the issues with the helpers before anything else since these are blockers for squid to operate right. > The missing file is a side effect which happens at almost the same time. > I would have started with looking at the lines: > sslcrtd_program /opt/squid-3.5/libexec/ssl_crtd -s /opt/squid-3.5/ssl_db -M 4MB > store_id_program /usr/local/bin/perl /opt/squid-3.5/scripts/store-id.pl > > And see what is causing this operation is not permitted. That is a known bug on BSD. The child process fork()'d to run the helper already has been down-privileged by Squid. On BSD systems that means the test to see if it is still root fails - unfortunately loudly. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
