Package: squid3 Version: 3.1.6-1 Severity: normal Tags: ipv6 Hi,
I'm running squid3 on a testing system. Since an upgrade to squid3
3.1.6-1 I can't establish https connections through squid. On the system
IPv6 is completely disabled via the kernel command line option
ipv6.disable. Looking with strace what squid does reveals this:
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 epoll_wait(6, {}, 65536, 1000) = 0
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 epoll_wait(6, {{EPOLLIN, {u32=15, u64=113677579482824719}}}, 65536, 1000)
= 1
1351 accept(15, {sa_family=AF_INET, sin_port=htons(35307),
sin_addr=inet_addr("10.10.10.26")}, [16]) = 11
1351 getsockname(11, {sa_family=AF_INET, sin_port=htons(8080),
sin_addr=inet_addr("10.10.10.17")}, [16]) = 0
1351 fcntl(11, F_GETFD) = 0
1351 fcntl(11, F_SETFD, FD_CLOEXEC) = 0
1351 fcntl(11, F_GETFL) = 0x2 (flags O_RDWR)
1351 fcntl(11, F_SETFL, O_RDWR|O_NONBLOCK) = 0
1351 accept(15, 0x257fb50, [28]) = -1 EAGAIN (Resource temporarily
unavailable)
1351 epoll_ctl(6, EPOLL_CTL_ADD, 11, {EPOLLIN|EPOLLERR|EPOLLHUP, {u32=11,
u64=8714463801493159947}}) = 0
1351 epoll_wait(6, {{EPOLLIN, {u32=11, u64=8714463801493159947}}}, 65536, 99)
= 1
Line of interest:
1351 read(11, "CONNECT www.pki.dfn.de:443 HTTP/"..., 4095) = 205
1351 socket(PF_NETLINK, SOCK_RAW, 0) = 14
1351 bind(14, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
1351 getsockname(14, {sa_family=AF_NETLINK, pid=1351, groups=00000000}, [12])
= 0
1351 sendto(14, "\24\0\0\0\26\0\1\3~\225vL\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
1351 recvmsg(14, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"0\0\0\0\24\0\2\0~\225vLG\5\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 108
1351 recvmsg(14, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0~\225vLG\5\0\0\0\0\0\0\1\0\0\0\10\0\1\0\177\0\0\1"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
1351 close(14) = 0
Line of interest:
1351 socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = -1 EAFNOSUPPORT (Address
family not supported by protocol)
1351 stat("/etc/localtime", {st_dev=makedev(9, 0), st_ino=505681,
st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096,
st_blocks=8, st_size=2309, st_atime=2010/05/22-04:16:49,
st_mtime=2010/05/22-04:16:49, st_ctime=2010/05/22-04:16:49}) = 0
Line of interest:
1351 write(5, "2010/08/26 18:25:34| comm_open: "..., 94) = 94
1351 epoll_ctl(6, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLOUT|EPOLLERR|EPOLLHUP,
{u32=11, u64=549755813899}}) = 0
1351 epoll_wait(6, {{EPOLLOUT, {u32=11, u64=549755813899}}}, 65536, 96) = 1
Line of interest:
1351 write(11, "HTTP/1.0 500 Internal Server Err"..., 3660) = 3660
1351 read(11, 0x7fff798b1b00, 65535) = -1 EAGAIN (Resource temporarily
unavailable)
1351 write(8, "1282839934.605 3 10.10.10.2"..., 87) = 87
1351 epoll_ctl(6, EPOLL_CTL_MOD, 11, {EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=11,
u64=17179869195}}) = 0
1351 epoll_ctl(6, EPOLL_CTL_DEL, 11, {0, {u32=11, u64=17179869195}}) = 0
1351 close(11) = 0
1351 epoll_wait(6, {}, 65536, 95) = 0
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 epoll_wait(6, {}, 65536, 892) = 0
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 epoll_wait(6, {}, 65536, 0) = 0
1351 open("/var/spool/squid3/03/70",
O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 11
1351 getdents(11, {{d_ino=2670855, d_off=1890004764, d_reclen=24, d_name=".."}
{d_ino=2670968, d_off=2147483647, d_reclen=24, d_name="."}}, 32768) = 48
1351 getdents(11, {}, 32768) = 0
1351 close(11) = 0
1351 epoll_wait(6, {}, 65536, 107) = 0
Looking in cache.log I found:
2010/08/26 18:25:34| comm_open: socket failure: (97) Address family not
supported by protocol
Now I'm using version 3.1.5-2 found at snapshot.debian.org which isn't
affected by this problem.
Bye, Jörg.
signature.asc
Description: Digital signature http://en.wikipedia.org/wiki/OpenPGP
