I installed squid 6.2. I built it from sources with ssl. the service starts normally. there are 2 network cards. one looks at the local network, the other at the Internet. I used the manual for configuring configuration files from the Internet. After executing the sudo squid -k reconfigure and sudo squid -k commands, the output is as follows
2024/04/09 22:08:41| Processing Configuration File: /etc/squid/squid.conf (depth 0)2024/04/09 22:08:41| Processing: acl localnet src 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN)2024/04/09 22:08:41| Processing: acl localnet src 10.0.0.0/8 # RFC 1918 local private network (LAN)2024/04/09 22:08:41| Processing: acl localnet src 100.64.0.0/10 # RFC 6598 shared address space (CGN)2024/04/09 22:08:41| Processing: acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines2024/04/09 22:08:41| Processing: acl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN)2024/04/09 22:08:41| Processing: acl localnet src 192.168.0.0/24 # RFC 1918 local private network (LAN)2024/04/09 22:08:41| Processing: acl localnet src fc00::/7 # RFC 4193 local private network range2024/04/09 22:08:41| Processing: acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines2024/04/09 22:08:41| Processing: acl SSL_ports port 4432024/04/09 22:08:41| Processing: acl Safe_ports port 80 # http2024/04/09 22:08:41| Processing: acl Safe_ports port 21 # ftp2024/04/09 22:08:41| Processing: acl Safe_ports port 443 # https2024/04/09 22:08:41| Processing: acl Safe_ports port 70 # gopher2024/04/09 22:08:41| Processing: acl Safe_ports port 210 # wais2024/04/09 22:08:41| Processing: acl Safe_ports port 1025-65535 # unregistered ports2024/04/09 22:08:41| Processing: acl Safe_ports port 280 # http-mgmt2024/04/09 22:08:41| Processing: acl Safe_ports port 488 # gss-http2024/04/09 22:08:41| Processing: acl Safe_ports port 591 # filemaker2024/04/09 22:08:41| Processing: acl Safe_ports port 777 # multiling http2024/04/09 22:08:41| Processing: http_access deny !Safe_ports2024/04/09 22:08:41| Processing: http_access deny CONNECT !SSL_ports2024/04/09 22:08:41| Processing: http_access allow localhost manager2024/04/09 22:08:41| Processing: http_access deny manager2024/04/09 22:08:41| Processing: include /etc/squid/conf.d/*.conf2024/04/09 22:08:41| Processing Configuration File: /etc/squid/conf.d/debian.conf (depth 1)2024/04/09 22:08:41| Processing: logfile_rotate 02024/04/09 22:08:41| Processing: http_access allow localhost2024/04/09 22:08:41| Processing: http_access allow localnet2024/04/09 22:08:41| Processing: http_access allow all2024/04/09 22:08:41| Processing: http_port 31302024/04/09 22:08:41| Processing: https_port 192.168.0.110:3129 intercept ssl-bump cert=/etc/squid/squidCA.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MB2024/04/09 22:08:41| Starting Authentication on port 192.168.0.110:31292024/04/09 22:08:41| Disabling Authentication on port 192.168.0.110:3129 (interception enabled)2024/04/09 22:08:41| Processing: http_port 192.168.0.110:3128 intercept2024/04/09 22:08:41| Starting Authentication on port 192.168.0.110:31282024/04/09 22:08:41| Disabling Authentication on port 192.168.0.110:3128 (interception enabled)2024/04/09 22:08:41| Processing: sslcrtd_program /usr/lib/squid/security_file_certgen -s /var/lib/squid/ssl_db -M 4MB2024/04/09 22:08:41| Processing: acl step1 at_step SslBump12024/04/09 22:08:41| Processing: ssl_bump peek step12024/04/09 22:08:41| Processing: ssl_bump bump all2024/04/09 22:08:41| Processing: ssl_bump splice all2024/04/09 22:08:41| Processing: coredump_dir /var/spool/squid2024/04/09 22:08:41| Processing: refresh_pattern ^ftp: 1440 20% 100802024/04/09 22:08:41| Processing: refresh_pattern ^gopher: 1440 0% 14402024/04/09 22:08:41| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0% 02024/04/09 22:08:41| Processing: refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims2024/04/09 22:08:41| Processing: refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims2024/04/09 22:08:41| Processing: refresh_pattern \/InRelease$ 0 0% 0 refresh-ims2024/04/09 22:08:41| Processing: refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims2024/04/09 22:08:41| Processing: refresh_pattern . 0 20% 43202024/04/09 22:08:41| Requiring client certificates.2024/04/09 22:08:41| Loaded signing certificate: /C=RU/ST=Moscow/L=Moscow/O=Internet Widgits Pty Ltd2024/04/09 22:08:41| Not requiring any client certificates
command sudo squid -k reconfigure
2024/04/09 22:09:41| Processing Configuration File: /etc/squid/squid.conf (depth 0)2024/04/09 22:09:41| Processing Configuration File: /etc/squid/conf.d/debian.conf (depth 1)2024/04/09 22:09:41| Starting Authentication on port 192.168.0.110:31292024/04/09 22:09:41| Disabling Authentication on port 192.168.0.110:3129 (interception enabled)2024/04/09 22:09:41| Starting Authentication on port 192.168.0.110:31282024/04/09 22:09:41| Disabling Authentication on port 192.168.0.110:3128 (interception enabled)2024/04/09 22:09:41| ERROR: cannot change current directory to /var/spool/squid: (2) No such file or directory2024/04/09 22:09:41| Current Directory is /home/nicolay2024/04/09 22:09:41| FATAL: failed to open /var/run/squid.pid: (2) No such file or directory exception location: File.cc(191) open
All certificates are generated. The paths are spelled out correctly. The Internet over https does not work on the client's machine. ping is passing. iptables has rules for port forwarding in PREROUTING and INPUT from 443 to 3129 and 80 to 3128.squid.config
acl localnet src 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN)acl localnet src 10.0.0.0/8 # RFC 1918 local private network (LAN)acl localnet src 100.64.0.0/10 # RFC 6598 shared address space (CGN)acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machinesacl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN)acl localnet src 192.168.0.0/24 # RFC 1918 local private network (LAN)acl localnet src fc00::/7 # RFC 4193 local private network rangeacl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machinesacl SSL_ports port 443acl Safe_ports port 80 # httpacl Safe_ports port 21 # ftpacl Safe_ports port 443 # httpsacl Safe_ports port 70 # gopheracl Safe_ports port 210 # waisacl Safe_ports port 1025-65535 # unregistered portsacl Safe_ports port 280 # http-mgmtacl Safe_ports port 488 # gss-httpacl Safe_ports port 591 # filemakeracl Safe_ports port 777 # multiling httphttp_port 3130https_port 192.168.0.110:3129 intercept ssl-bump cert=/etc/squid/squidCA.pem generate-host-certificates=on dynamic_cert_mem_cache_size=4MBhttp_port 192.168.0.110:3128 interceptsslcrtd_program /usr/lib/squid/security_file_certgen -s /var/lib/squid/ssl_db -M 4MBacl step1 at_step SslBump1ssl_bump peek step1ssl_bump bump allssl_bump splice all
Help please. I'm new to linux. Squida logs and cache cannot be read. All the information on the Internet is different, but nothing helped. Actions such as clearing the cache or creating a pi file manually do not help.When I installed squid 5.7, I managed to get the Internet from the repository, but over the http protocol. The config is the same. squid 6.2 had to be installed because squid 5.7 does not want to compile on my machine. I think it has to do with the source code. The machine is on ubuntu server 22.04. I use it on a virtual machine.