https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162021-04-20T07:01:17ZpfSense bugtrackerpfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=530842021-04-20T07:01:17ZViktor Gurov
<ul></ul><p>it works fine after disabling SquidGuard</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=531772021-04-24T18:08:32ZKris Phillips
<ul></ul><p>Confirmed. You only need to enable squidGuard for the issue to become present. If you have it installed, but disabled, it is not a problem.</p>
<p>May be relevant logs that show up after enabling:<br />2021-04-24 23:06:12 [65699] (squidGuard): can't write to logfile /var/log/squidGuard/squidGuard.log<br />2021-04-24 23:06:12 [65699] New setting: logdir: /var/squidGuard/log<br />2021-04-24 23:06:12 [65699] New setting: dbhome: /var/db/squidGuard</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=531782021-04-24T18:12:38ZKris Phillips
<ul></ul><p>Error message that shows up in the Status page with squidGuard enabled:</p>
<p>HTTP/1.1 503 Service Unavailable<br />Server: squid/4.13<br />Mime-Version: 1.0<br />Date: Sat, 24 Apr 2021 23:11:55 GMT<br />Content-Type: text/html;charset=utf-8<br />Content-Length: 4190<br />X-Squid-Error: ERR_SECURE_CONNECT_FAIL 92<br />Vary: Accept-Language<br />Content-Language: en<br />X-Cache: MISS from localhost<br />X-Cache-Lookup: MISS from localhost:3128<br />Via: 1.1 localhost (squid/4.13)<br />Connection: close</p>
<p><!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><br /><html><head><br /><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><br /><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><br /><title>ERROR: The requested URL could not be retrieved</title><br /><style type="text/css"><!--<br /> /*
* Copyright (C) 1996-2020 The Squid Software Foundation and contributors
*
* Squid software is distributed under GPLv2+ license and includes
* contributions from numerous individuals and organizations.
* Please see the COPYING and CONTRIBUTORS files for details.<br /> */</p>
<p>/*<br /> Stylesheet for Squid Error pages<br /> Adapted from design by Free CSS Templates<br /> <a class="external" href="http://www.freecsstemplates.org">http://www.freecsstemplates.org</a><br /> Released for free under a Creative Commons Attribution 2.5 License<br />*/</p>
/* Page basics */
<ul>
<li>{<br /> font-family: verdana, sans-serif;<br />}</li>
</ul>
<p>html body {<br /> margin: 0;<br /> padding: 0;<br /> background: #efefef;<br /> font-size: 12px;<br /> color: #1e1e1e;<br />}</p>
<p>/* Page displayed title area */<br />#titles {<br /> margin-left: 15px;<br /> padding: 10px;<br /> padding-left: 100px;<br /> background: url('/squid-internal-static/icons/SN.png') no-repeat left;<br />}</p>
<p>/* initial title */<br />#titles h1 {<br /> color: #000000;<br />}<br />#titles h2 {<br /> color: #000000;<br />}</p>
<p>/* special event: FTP success page titles */<br />#titles ftpsuccess {<br /> background-color:#00ff00;<br /> width:100%;<br />}</p>
<p>/* Page displayed body content area */<br />#content {<br /> padding: 10px;<br /> background: #ffffff;<br />}</p>
<p>/* General text */<br />p {<br />}</p>
<p>/* error brief description */<br />#error p {<br />}</p>
<p>/* some data which may have caused the problem */<br />#data {<br />}</p>
<p>/* the error message received from the system or other software */<br />#sysmsg {<br />}</p>
<p>pre {<br />}</p>
<p>/* special event: FTP / Gopher directory listing */<br />#dirmsg {<br /> font-family: courier, monospace;<br /> color: black;<br /> font-size: 10pt;<br />}<br />#dirlisting {<br /> margin-left: 2%;<br /> margin-right: 2%;<br />}<br />#dirlisting tr.entry td.icon,td.filename,td.size,td.date {<br /> border-bottom: groove;<br />}<br />#dirlisting td.size {<br /> width: 50px;<br /> text-align: right;<br /> padding-right: 5px;<br />}</p>
<p>/* horizontal lines */<br />hr {<br /> margin: 0;<br />}</p>
<p>/* page displayed footer area */<br />#footer {<br /> font-size: 9px;<br /> padding-left: 10px;<br />}</p>
<p>body<br />:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }<br />:lang(he) { direction: rtl; }<br /> --></style><br /></head><body id="ERR_SECURE_CONNECT_FAIL"><br /><div id="titles"><br /><h1>ERROR</h1><br /><h2>The requested URL could not be retrieved</h2><br /></div><br /><hr></p>
<p><div id="content"><br /><p>The following error was encountered while trying to retrieve the URL: <a href="https://192.168.56.1/sgerror.php?"><a class="external" href="https://192.168.56.1/sgerror.php?&lt;/a&gt;&lt;/p">https://192.168.56.1/sgerror.php?&lt;/a&gt;&lt;/p</a>></p>
<p><blockquote id="error"><br /><p><b>Failed to establish a secure connection to 192.168.56.1</b></p><br /></blockquote></p>
<p><div id="sysmsg"><br /><p>The system returned:</p><br /><blockquote id="data"><br /><pre>(92) Protocol error (TLS code: X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)</pre><br /><p>Self-signed SSL Certificate: /O=Netgate pfSense Plus webConfigurator Self-Signed Certificate/CN=pfSense-60843f6197396</p><br /></blockquote><br /></div></p>
<p><p>This proxy and the remote host failed to negotiate a mutually acceptable security settings for handling your request. It is possible that the remote host does not support secure connections, or the proxy is not satisfied with the host security credentials.</p></p>
<p><p>Your cache administrator is <a href="mailto:admin@localhost?subject=CacheErrorInfo%20-%20ERR_SECURE_CONNECT_FAIL&body=CacheHost%3A%20localhost%0D%0AErrPage%3A%20ERR_SECURE_CONNECT_FAIL%0D%0AErr%3A%20(92)%20Protocol%20error%0D%0ATimeStamp%3A%20Sat,%2024%20Apr%202021%2023%3A11%3A55%20GMT%0D%0A%0D%0AClientIP%3A%20127.0.0.1%0D%0AServerIP%3A%20192.168.56.1%0D%0A%0D%0AHTTP%20Request%3A%0D%0AGET%20%2Fsgerror.php%3Furl%3D403%2520%26a%3D127.0.0.1%26n%3Dlocalhost%26i%3D%26s%3Ddefault%26t%3Dnone%26u%3Dcache_object%3A%2F%2F192.168.56.1%2Finfo%20HTTP%2F1.0%0AUser-Agent%3A%20squidclient%2F4.13%0D%0AAccept%3A%20*%2F*%0D%0AConnection%3A%20close%0D%0AHost%3A%20192.168.56.1%0D%0A%0D%0A%0D%0A">admin@localhost</a>.</p><br /><br><br /></div></p>
<p><hr><br /><div id="footer"><br /><p>Generated Sat, 24 Apr 2021 23:11:55 GMT by localhost (squid/4.13)</p><br /><!-- ERR_SECURE_CONNECT_FAIL --><br /></div><br /></body></html></p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=531792021-04-24T18:13:49ZKris Phillips
<ul></ul><p>Status page with squidGuard disabled:</p>
<p>Squid Object Cache: Version 4.13<br />Build Info:<br />Service Name: squid<br />Start Time: Sat, 24 Apr 2021 23:03:22 GMT<br />Current Time: Sat, 24 Apr 2021 23:13:32 GMT<br />Connection information for squid:<br /> Number of clients accessing cache: 1<br /> Number of HTTP requests received: 10<br /> Number of ICP messages received: 0<br /> Number of ICP messages sent: 0<br /> Number of queued ICP replies: 0<br /> Number of HTCP messages received: 0<br /> Number of HTCP messages sent: 0<br /> Request failure ratio: 0.00<br /> Average HTTP requests per minute since start: 1.0<br /> Average ICP messages per minute since start: 0.0<br /> Select loop called: 1547 times, 394.479 ms avg<br />Cache information for squid:<br /> Hits as % of all requests: 5min: 0.0%, 60min: 0.0%<br /> Hits as % of bytes sent: 5min: 100.0%, 60min: 100.0%<br /> Memory hits as % of hit requests: 5min: 0.0%, 60min: 0.0%<br /> Disk hits as % of hit requests: 5min: 0.0%, 60min: 0.0%<br /> Storage Swap size: 0 KB<br /> Storage Swap capacity: 0.0% used, 100.0% free<br /> Storage Mem size: 216 KB<br /> Storage Mem capacity: 0.3% used, 99.7% free<br /> Mean Object Size: 0.00 KB<br /> Requests given to unlinkd: 0<br />Median Service Times (seconds) 5 min 60 min:<br /> HTTP Requests (All): 0.00091 0.00091<br /> Cache Misses: 0.00091 0.00091<br /> Cache Hits: 0.00000 0.00000<br /> Near Hits: 0.00000 0.00000<br /> Not-Modified Replies: 0.00000 0.00000<br /> DNS Lookups: 0.00000 0.00000<br /> ICP Queries: 0.00000 0.00000<br />Resource usage for squid:<br /> UP Time: 610.259 seconds<br /> CPU Time: 0.243 seconds<br /> CPU Usage: 0.04%<br /> CPU Usage, 5 minute avg: 0.01%<br /> CPU Usage, 60 minute avg: 0.04%<br /> Maximum Resident Size: 94704 KB<br /> Page faults with physical i/o: 0<br />Memory accounted for:<br /> Total accounted: 865 KB<br /> memPoolAlloc calls: 38270<br /> memPoolFree calls: 38436<br />File descriptor usage for squid:<br /> Maximum number of file descriptors: 12969<br /> Largest file desc currently in use: 21<br /> Number of file desc currently in use: 9<br /> Files queued for open: 0<br /> Available number of file descriptors: 12960<br /> Reserved number of file descriptors: 100<br /> Store Disk files open: 0<br />Internal Data Structures:<br /> 52 StoreEntries<br /> 52 StoreEntries with MemObjects<br /> 0 Hot Object Cache Items<br /> 0 on-disk objects</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=531802021-04-24T18:14:27ZKris Phillips
<ul></ul><p>Based on the error messages, it would seem it's something with TLS negotiation, which is odd since it works fine without squidGuard enabled.</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=532942021-05-02T02:08:06ZViktor Gurov
<ul><li><strong>Category</strong> changed from <i>Squid</i> to <i>squidguard</i></li><li><strong>Affected Version</strong> deleted (<del><i>2.5.0</i></del>)</li></ul><p>fix:<br /><a class="external" href="https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/83">https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/83</a></p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=533082021-05-03T07:48:20ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Pull Request Review</i></li><li><strong>Assignee</strong> set to <i>Viktor Gurov</i></li></ul> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=543302021-06-05T13:49:35ZKris Phillips
<ul></ul><p>Can someone provide the patch once this is merged so we can test?</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=543432021-06-07T00:20:17ZViktor Gurov
<ul><li><strong>File</strong> <a href="/attachments/3713">83.diff</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/3713/83.diff">83.diff</a> added</li></ul><p>Kris Phillips wrote:</p>
<blockquote>
<p>Can someone provide the patch once this is merged so we can test?</p>
</blockquote>
<p>See the attachment</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=547212021-06-24T12:05:01ZRenato Botelhorenato@netgate.com
<ul><li><strong>Status</strong> changed from <i>Pull Request Review</i> to <i>Feedback</i></li></ul><p>PR has been merged. Thanks!</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=547552021-06-26T21:28:25ZKris Phillips
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul><p>Confirmed on 2.5.2 June 26th build of Community Edition that this issue is resolved. I have enabled both services and the status page is fully functional.</p> pfSense Packages - Bug #11711: New Squid Status Page Non-Functionalhttps://redmine.pfsense.org/issues/11711?journal_id=554592021-08-05T02:40:45ZViktor Gurov
<ul><li><strong>Related to</strong> <i><a class="issue tracker-8 status-3 priority-4 priority-default closed" href="/issues/12125">Regression #12125</a>: squidguard 1.16.18_19 conguration error</i> added</li></ul>