On 2/10/23 10:28, Dave Blanchard wrote:
Squid's user friendliness could use a major overhaul.
Agreed. As one of the people trying to do that for the past decade ...
any suggestions of better wording are welcome.
I absolutely despise programs which are designed this way.
Ah, there we have part of the problem, Squid is not exactly designed. As
Francesco mentioned these days it is a collection of 40+ years of Ad Hoc
community contributions.
The group of long-term developers (we call ourselves "core team") have
tried to guide/wrangle some coherency out of that - some variable success.
It just silently fails on startup with no obvious reason or explanation given,
That is false. Squid writes as much information as it can about the
problem to log, stderr, and if possible the system message log. There is
nothing else a process like Squid can do.
even if one enables debug output to find out why.
If you are not seeing information detailing the problem in the above
mentioned logs/outputs. Then the problem is either:
1) something broken in the ability to write those log/output.
This is a major problem. How does one report about problems when the
reporting method is broken? Sorry.
Using multiple outputs during startup helps reduce this but it is
possible that all of them have been forbidden. Further troubleshooting
can be done by running Squid with "squid -k parse" - the output to
stderr should be printed to the shell for admin to view.
2) Squid has no known information to display
Instead you have to get online and search, ask questions in a mailing list, etc to find out you have to type in some obscure commands.
Hmm. That is the normal process for any software error which you do not
already fully understand.
For those we believe to be clear enough already we try to document
troubleshooting procedures in the Squid wiki
<https://wiki.squid-cache.org/>. Suggestions for better organization
and/or missing texts of that content are always welcome.
"Too few ssl_crtd processes are running"
... means *exactly* what it says.
Note: this is not an error message. It is part of the information Squid
knows about the problem. It is listed to help inform you about what was
going on when the error occured. It may be helpful to your troubleshooting.
Squid needs to use some "ssl_crtd" helpers. There are not enough of them
running. ... Squid is about to start some to use. Then ...
and "FATAL: The ssl_crtd helpers are crashing too rapidly, need help!"
... also means exactly what it says.
"ssl_crtd" is a binary separate from Squid. We humans know that it is
one of the Squid Project bundled helpers, but Squid itself cannot tell.
Squid is not getting anything out of the helper. Not even a message
saying what went wrong for it. That would have appeared as messages in
your log between the two above lines .. .and what Matus was asking about.
Squid tries approximately 10 times to recover the helper before the
FATAL message is produced and Squid itself exits instead of staying in
the infinite loop of "start helper...start helper...start helper..."
are some of the dumbest error messages ever conceived. Reminds me of every web site these days with their "Oops something went wrong lol" errors.
This one is more inline with the classic "Keyboard not found. Press any
key to continue".
It seems dumb, until you actually understand what it means. One must
plug in keyboard (aks solve the problem) before the machine can be used.
Or for Squid ... only by researching and fixing the problem will you get
any better info about the problem.
FYI: Documentation about ssl_crtd can be found at
<https://wiki.squid-cache.org/Features/DynamicSslCert>.
The page need updating to detail this and other errors the helper
produces and how to solve them. Any volunteers?
HTH
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users
