Amos Jeffries | 1 Nov 03:51 2014
Picon

[PATCH] RFC 6176 compliance


RFC 6176 prohibits use of SSLv2.
https://tools.ietf.org/html/rfc6176

Remove the documentation and support for configuring Squid with
SSLv2-only.

Explicitly enable the SSL_NO_SSLv2 option when provided by the library
to prevent implicit fallback.

Remove support for ssloptions= values which are for SSLv2-specific bugs.

Due to the way they are implemented with atoi() sslversion=N
configuration will still accept the values for SSLv2-only. But the
context creation will now unconditionally produce "SSLv2 not
supported" errors if the now undocumented values are attempted.

Amos
=== modified file 'src/cf.data.pre'
--- src/cf.data.pre	2014-10-17 00:35:19 +0000
+++ src/cf.data.pre	2014-11-01 01:46:54 +0000
 <at>  <at>  -1723,55 +1723,53  <at>  <at> 
 			years.
 			This option is enabled by default when ssl-bump is used.
 			See the ssl-bump option above for more information.
 			
 	   dynamic_cert_mem_cache_size=SIZE
 			Approximate total RAM size spent on cached generated
(Continue reading)

noc | 1 Nov 03:06 2014

Build failed in Jenkins: 3.HEAD-amd64-centos-7-clang #76

See <http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/76/changes>

Changes:

[Amos Jeffries] Docs: convert purge tool README to man.1 page

Initial conversion performed by Santiago Garcia Mantinan of Debian.

With po4a adjustments by Amos Jeffries.

------------------------------------------
[...truncated 11252 lines...]
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/log'>
Making uninstall in ipc
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
Making uninstall in mgr
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
Making uninstall in snmp
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
Making uninstall in adaptation
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in icap
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Nothing to be done for `uninstall'.
(Continue reading)

scanty babu | 31 Oct 06:20 2014
Picon

Issue detected in squid 2.7 version

Hi,

We are using squid 2.7.7 version in our production environment and
recently faced an issue with this version.

The scenario:
1. Slow Client side connection
2. Fast Server side connection
3. Client sends a range request from the end eg. 10000 byte Content
length and the client requests 0-9500 bytes.

Client connection being slow, the server side reads get automatically
stopped when the data to be written to the client is more than the
ReadAhead gap(16KB, default in our case).

The server side reads are resumed when all the data in memory has been
written to the client.
The mechanism of defer and resume keeps occurring during the length of
the download.

This mechanism works properly in most of the cases, except where Range
request are involved.
The client gets the requested range of bytes, but does not flip
DEFER_READ flag on the server side FD. So, server reads wait for about
15 minutes(timeout) and connection is closed. The HTTP object is
released from the store even though the server has sent the complete
object.

The solution:
fwdDeferReadCheck function checks if the server side reads have to be
(Continue reading)

noc | 30 Oct 17:58 2014

Build failed in Jenkins: 3.HEAD-amd64-ubuntu-saucy #356

See <http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/356/changes>

Changes:

[Amos Jeffries] Source Maintenance: bump astyle version to 2.03

[squidadm <at> squid-cache.org] SourceFormat Enforcement

[Christos Tsantilas] Fix: Unable to open FTP socket during reconfigure

Squid does not close FTP listening ports on reconfigure.

------------------------------------------
[...truncated 64097 lines...]
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/ident'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/ident'>
Making uninstall in log
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/log'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/log'>
Making uninstall in ipc
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/ipc'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/ipc'>
Making uninstall in mgr
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/mgr'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-05-nodeps-esi/squid-3.HEAD-BZR/_build/src/mgr'>
Making uninstall in snmp
(Continue reading)

noc | 30 Oct 14:00 2014

Build failed in Jenkins: 3.HEAD-amd64-centos-7-clang #70

See <http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/70/changes>

Changes:

[Amos Jeffries] Boilerplate: add copyright blurb to auto-generated files and release notes

[Amos Jeffries] Source Maintenance: Add checks for copyright blurbs

* Check for copyright blurbs in repository files.

* Allow skipping of third-party and binary files.

* Add copyright blurb to auto-generated files created by maintenance
script.

------------------------------------------
[...truncated 12657 lines...]
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/log'>
Making uninstall in ipc
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
Making uninstall in mgr
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
Making uninstall in snmp
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
(Continue reading)

Tsantilas Christos | 30 Oct 10:03 2014
Picon
Picon

commit on bzr.squid-cache.org problems

Hi all,

I am still having problems when trying to use squid bzr repository. 
Currently I am able to get updates but I can not commit on bzr 
repository. I am getting the following error:

bzr commit
bzr: ERROR: Cannot lock 
LockDir(filtered-139935940210576:///bzr/squid3/trunk/.bzr/branch/lock): 
Permission denied: "/bzr/squid3/trunk/.bzr/branch/lock/dts03rzm1k.tmp": 
[Errno 13] Permission denied: 
'/bzr/squid3/trunk/.bzr/branch/lock/dts03rzm1k.tmp'

Regards,
     Christos

_______________________________________________
squid-dev mailing list
squid-dev <at> lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev
noc | 30 Oct 07:31 2014

Build failed in Jenkins: 3.HEAD-amd64-centos-7 #153

See <http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/153/>

------------------------------------------
[...truncated 11189 lines...]
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/log'>
Making uninstall in ipc
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/ipc'>
Making uninstall in mgr
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/mgr'>
Making uninstall in snmp
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/snmp'>
Making uninstall in adaptation
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in icap
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Nothing to be done for `uninstall'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation'>
make[4]: Nothing to be done for `uninstall-am'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation'>
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src/adaptation'>
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-00-default/squid-3.HEAD-BZR/_build/src'>
 ( cd
(Continue reading)

noc | 30 Oct 07:25 2014

Build failed in Jenkins: 3.HEAD-amd64-ubuntu-saucy #354

See <http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/354/>

------------------------------------------
[...truncated 35901 lines...]
Making uninstall in ipc
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/ipc'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/ipc'>
Making uninstall in mgr
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/mgr'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/mgr'>
Making uninstall in ssl
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/ssl'>
 ( cd
'<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/libexec'>
&& rm -f ssl_crtd )
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/ssl'>
Making uninstall in snmp
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/snmp'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/snmp'>
Making uninstall in adaptation
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in icap
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Nothing to be done for `uninstall'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-ubuntu-saucy/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
make[4]: Nothing to be done for `uninstall-am'.
(Continue reading)

noc | 29 Oct 07:21 2014

Build failed in Jenkins: 3.HEAD-amd64-centos-7-clang #66

See <http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/66/changes>

Changes:

[Amos Jeffries] ext_kerberos_ldap_group_acl: -n option to disable automated SASL/GSSAPI

The -n option disables the automated Kerberos authentication
(SASL/GSSAPI) to AD and requires username/password (SASL/SIMPLE)
instead.

Also, improvements in caching Kerberos credentials for setup with low
Squid cache TTL.

[Amos Jeffries] negotiate_kerberos_auth: output group= kv-pair

Output group= if negotiate_kerberos_auth can retrieve AD groups from
Kerberos ticket for further processing by squid to external helpers.

------------------------------------------
[...truncated 37366 lines...]
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/snmp'>
Making uninstall in adaptation
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in icap
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Nothing to be done for `uninstall'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
make[4]: Nothing to be done for `uninstall-am'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7-clang/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
(Continue reading)

Amos Jeffries | 28 Oct 09:32 2014
Picon

[RFC] deprecating ICP protocol


I would like to deprecate ICP protocol from a first-class citizen to a
second-class. Swapping it for HTCP as the default peer exchange
protocol for Squid-3.6.

ICP protocol was designed for use in HTTP/1.0 and works well for that.
However Squid and most servers are now HTTP/1.1 software.

ICP is not able to produce accurate results for the increasingly
popular HTTP/1.1 Vary objects. It will also have difficulty with
Store-ID adapted objects where header fields (Vary and others) are
used by the Store-ID helper.

Amos
noc | 28 Oct 08:29 2014

Build failed in Jenkins: 3.HEAD-amd64-centos-7 #148

See <http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/148/>

------------------------------------------
[...truncated 38697 lines...]
Making uninstall in adaptation
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in icap
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Nothing to be done for `uninstall'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation/icap'>
make[4]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
make[4]: Nothing to be done for `uninstall-am'.
make[4]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/adaptation'>
Making uninstall in esi
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/esi'>
make[3]: Nothing to be done for `uninstall'.
make[3]: Leaving directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src/esi'>
make[3]: Entering directory `<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_build/src'>
 ( cd
'/tmp/am-dc-19904/<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/share'>
&& rm -f mib.txt )
 ( cd
'/tmp/am-dc-19904/<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/libexec'>
&& rm -f diskd unlinkd )
 /usr/bin/rm -f -f /tmp/am-dc-19904/<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/etc/mime.conf>
 /usr/bin/rm -f -f /tmp/am-dc-19904/<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/etc/squid.conf>
 ( cd
'/tmp/am-dc-19904/<http://build.squid-cache.org/job/3.HEAD-amd64-centos-7/ws/btlayer-02-maximus/squid-3.HEAD-BZR/_inst/share/man/man8'>
&& rm -f squid.8 )
(Continue reading)


Gmane