Skip to content

Instantly share code, notes, and snippets.

@andrewpetrochenkov
Last active August 26, 2025 10:54
Show Gist options
  • Select an option

  • Save andrewpetrochenkov/5dd2aca20ab3eec6856f36ac14b12b52 to your computer and use it in GitHub Desktop.

Select an option

Save andrewpetrochenkov/5dd2aca20ab3eec6856f36ac14b12b52 to your computer and use it in GitHub Desktop.
squid macos #squid
brew install squid
brew link --force squid
sudo ln -fs /opt/homebrew/opt/squid/sbin/squid /usr/local/bin/squid
sudo ln -fs /opt/homebrew/Cellar/squid/6.11/libexec/security_file_certgen /usr/local/bin/security_file_certgen
find /opt/homebrew -name "security_file_certgen" 2>/dev/null
# /opt/homebrew/Cellar/squid/6.11/libexec/security_file_certgen
sudo mkdir -p /usr/local/etc/squid/ssl_cert
cd /usr/local/etc/squid/ssl_cert
openssl genrsa -out /usr/local/etc/squid/ssl_cert/squidCA.key 2048
openssl req -new -x509 -key /usr/local/etc/squid/ssl_cert/squidCA.key -out /usr/local/etc/squid/ssl_cert/squidCA.pem -days 365 -subj "/C=US/ST=State/L=City/O=Organization/OU=Unit/CN=localhost"
sudo chown -R $(whoami) /usr/local/etc/squid/ssl_cert
sudo chmod 600 /usr/local/etc/squid/ssl_cert/squidCA.key
sudo chmod 644 /usr/local/etc/squid/ssl_cert/squidCA.pem
# VALIDATE
openssl x509 -in /usr/local/etc/squid/ssl_cert/squidCA.pem -text -noout
openssl rsa -in /usr/local/etc/squid/ssl_cert/squidCA.key -check
# /opt/homebrew/etc/squid.conf
sudo squid -k reconfigure
sudo squid -k check
squid -N -d 9
brew services stop squid
rm /opt/homebrew/var/run/squid.pid
brew services start squid
brew services list | grep squid
curl -x http://127.0.0.1:3128 -v https://example.com
cat /opt/homebrew/var/logs/access.log
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment