LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 05-07-2013, 03:47 AM   #1
linuxlover.chaitanya
Senior Member
 
Registered: Apr 2008
Location: Gurgaon, India
Distribution: Cent OS 6/7
Posts: 4,631

Rep: Reputation: Disabled
Squid reverse proxy for Exchange: Errors


Hi All,

I am trying to configure Squid to work as reverse proxy for Exchange using the How-To on Squid official website. Following is my configuration:

Code:
https_port 443 accel cert=/etc/pki/tls/misc/newcert.pem key=/etc/pki/tls/misc/newkey.pem defaultsite=<our-mail-domain>
cache_peer 10.10.10.13 parent 443 0 no-query originserver login=PASS ssl sslcert=/etc/pki/tls/misc/newcert.pem name=exchangeServer
acl EXCG dstdomain <our-mail-domain>
cache_peer_access exchangeServer allow EXCG
cache_peer_access exchangeServer deny all
never_direct allow EXCG

http_access allow EXCG
http_access deny all
miss_access allow EXCG
miss_access deny all
These are the two links I have referenced:
http://www.brichet.be/?page_id=110
http://wiki.squid-cache.org/ConfigEx...se/ExchangeRpc

I am having errors starting the Squid service. Following is the error:
Code:
FATAL: Failed to acquire SSL private key '/etc/pki/tls/misc/newcert.pem': error:0906D06C:PEM routines:PEM_read_bio:no start line

Squid Cache (Version 3.1.10): Terminated abnormally.
CPU Usage: 0.021 seconds = 0.013 user + 0.008 sys
Maximum Resident Size: 28448 KB
Page faults with physical i/o: 0
Any help would be much appreciated.
 
Old 05-08-2013, 01:51 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
as per the message, the PEM key is broken in some way I'd presume. Is it proeprly unix formatted? Is it actually a pem key?
 
Old 05-09-2013, 01:37 AM   #3
linuxlover.chaitanya
Senior Member
 
Registered: Apr 2008
Location: Gurgaon, India
Distribution: Cent OS 6/7
Posts: 4,631

Original Poster
Rep: Reputation: Disabled
Problem solved. I had two pem files, Certificate and RSA Key. But both were individual. I copied the contents of RSA Key PEM file to certificate PEM file. Squid works fine.
 
Old 12-29-2014, 07:03 AM   #4
ramin1981
LQ Newbie
 
Registered: Feb 2013
Posts: 11

Rep: Reputation: Disabled
Quote:
Originally Posted by linuxlover.chaitanya View Post
Problem solved. I had two pem files, Certificate and RSA Key. But both were individual. I copied the contents of RSA Key PEM file to certificate PEM file. Squid works fine.
hi. how did you do it. which key from where copied to destination. Can you please explain it clearely. thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL Certificate import for Reverse Proxy to Exchange rvicker Linux - Server 2 02-14-2012 10:04 AM
squid reverse proxy fernfrancis Linux - Server 1 03-29-2010 02:58 AM
Squid 2.6 Reverse Proxy from Squid(3128) to OrginServer(80) Not working rraj Linux - Server 0 06-06-2008 02:29 PM
Squid as Reverse Proxy and LAN proxy? zivota Linux - Security 2 02-26-2007 05:00 PM
Enable Exchange 2003 webmail with fedora 4 reverse proxy or something bootiack Linux - Software 0 11-01-2005 02:11 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 01:45 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration