Hello Alex - here is the output of squid -v command:
squid -v
Squid Cache: Version 6.3-20230903-ra9c06aa6a
Service Name: squid
no IPV6
This binary uses OpenSSL 1.1.1n 15 Mar 2022. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=/include' '--mandir=/share/man' '--infodir=/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=/lib/squid5' '--disable-maintainer-mode' '--disable-silent-rules' '--datadir=/usr/share/squid5' '--sysconfdir=/etc/squid5' '--mandir=/usr/share/man' '--enable-build-info=no IPV6' '--enable-inline' '--enable-arp-acl' '--disable-wccp' '--disable-wccp2' '--disable-htcp--disable-arch-native' '--disable-ipv6' '--enable-optimizations' '--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-auth-basic=DB,fake,getpwnam,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB' '--enable-auth-digest=file,LDAP' '--enable-auth-negotiate=kerberos,wrapper' '--enable-auth-ntlm=fake,SMB_LM' '--enable-external-acl-helpers=file_userip,kerberos_ldap_group,LDAP_group,session,SQL_session,time_quota,unix_group,wbinfo_group' '--enable-url-rewrite-helpers=fake' '--enable-security-cert-validators=fake' '--enable-storeid-rewrite-helpers=file' '--enable-eui' '--enable-esi' '--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--enable-snmp' '--disable-ident-lookups' '--disable-translation' '--with-swapdir=/var/spool/squid5' '--with-logdir=/var/log/squid5' '--with-pidfile=/var/run/squid5.pid' '--with-large-files' '--with-default-user=proxy' '--with-openssl' '--with-filedescriptors=8192' '--enable-ssl-crtd' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-linux-netfilter' '--enable-stacktraces' 'PKG_CONFIG_PATH=:/usr/local/lib/pkgconfig:/usr/lib64/pkgconfig:/usr/share/pkgconfig' 'CFLAGS=-g -O2 -m64 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -m64 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 'build_alias=x86_64-linux-gnu'
Please note two things - I was using 5.x branch for some time (ie. squid5 prefix) and lately did upgrade to 6.x as the developers said 5.x is EOL/not maintained, I do not have native ipv6 so I had some tun6to4 tunel to closed broker - so now I do not have ipv6 connectivity. So I decided to set --disable-ipv6 for now.
I have gcc
gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/8/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 8.3.0-6' --with-bugurl=file:///usr/share/doc/gcc-8/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --prefix=/usr --with-gcc-major-version-only --program-suffix=-8 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-libmpx --enable-plugin --enable-default-pie --with-system-zlib --with-target-system-zlib --enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
Thread model: posix
gcc version 8.3.0 (Debian 8.3.0-6)
with Debian 10 x64
LL
-----Původní zpráva-----
Od: squid-users za uživatele Alex Rousskov
Odesláno: út 12.9.2023 16:48
Komu: squid-users@xxxxxxxxxxxxxxxxxxxxx
Předmět: Re: Squid BUG: assurance failed: tok.skip(WellKnownUrlPathPrefix())
On 2023-09-12 10:21, Loučanský Lukáš wrote:
> today I was going to compile a new version of my beloved squid
> proxy (v6.3 or 6.3-20230903-ra9c06aa6a)
FWIW, "was going to compile" part does not make it clear (to me) whether
you did actually compile/test v6.3.
> just to be welcomed by non
> working older configmgr.cgi and [debian package installed] squidclient
> (v4.6). After replacing squidclient with (compiled with squid) version
> 6.3 it's still not working, giving me accesss denied page.
>
> My cache.log contains these bug info lines:
>
> 023/09/12 16:07:03 kid3| ERROR: Squid BUG: assurance failed:
> tok.skip(WellKnownUrlPathPrefix())
> exception location: cache_manager.cc(193) ParseUrl
If the above output is from Squid v6.3, then you may have found a v6.3
problem that we do not know about. Please share the HTTP request that
triggers the above output.
Otherwise, please try to upgrade to Squid v6.3 because its commit
6695897 is meant to fix a v6.1 bug with the above symptoms.
Thank you,
Alex.
> current master transaction: master469155
> 2023/09/12 16:07:03 kid3| ERROR: Squid BUG: assurance failed:
> tok.skip(WellKnownUrlPathPrefix())
> exception location: cache_manager.cc(193) ParseUrl
> current master transaction: master469155
>
> In the file src/cache_manager.cc there is this
>
> const SBuf &
> CacheManager::WellKnownUrlPathPrefix()
> {
> static const SBuf prefix("/squid-internal-mgr/");
> return prefix;
> }
>
> and on the line 193 is this assure (after tok tokenizer)
>
> Parser::Tokenizer tok(uri.path());
>
> Assure(tok.skip(WellKnownUrlPathPrefix()));
>
> Is there something wrong with my config I should change after 6.2 to 6.3
> upgrade? I have some classic http_access manager allow ... and
> http_access manager deny lines. No definition what [acl] manager means.
>
> I have found some mentions here
> https://github.com/squid-cache/squid/blob/master/ChangeLog and somewhere
> inside the commit / review git hub section for squid. But nothing says
> what to do make it work right. Besides this it seems squid as a proxy
> works fine...
>
> Thanks
>
> Lukas
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://lists.squid-cache.org/listinfo/squid-users
