View source for Configure SSL Bump on squid 3.3

<pre>yum -y install squid</pre>
https://www.digitalocean.com/community/tutorials/how-to-install-squid-proxy-on-centos-6

Generate self signed certificate
<pre>
openssl req -new -newkey rsa:1024 -days 1365 -nodes -x509 -keyout squid.pem  -out squid.pem
openssl x509 -in myca.pem -outform DER -out myca.der
</pre>
Edit squid.conf
<pre>
sudo vim /etc/squid/squid.conf
</pre>
Add/Edit the following items to enable sslbump
<pre>
http_port 9876 ssl-bump cert=/path/squid.pem
# allow all for testing
http_access allow all
# Bumped requests have relative URLs so Squid has to use reverse proxy
# or accelerator code. By default, that code denies direct forwarding.
# The need for this option may disappear in the future.
always_direct allow all

acl broken_sites dstdomain .apple.com .itunes.com
ssl_bump none broken_sites
ssl_bump client-first all

</pre>

I met a problem after start squid with ssl bump.
In /var/log/squid/cache.log
<pre>
2015/08/12 21:42:13 kid1| /var/lib/ssl_db: (2) No such file or directory
2015/08/12 21:42:13 kid1| helperOpenServers: Starting 5/32 'ssl_crtd' processes
(ssl_crtd): Uninitialized SSL certificate database directory: /var/lib/ssl_db. To initialize, run "ssl_crtd -c -s /var/lib/ssl_db".
</pre>
Then I did
<pre>
/usr/lib64/squid/ssl_crtd -c -s /var/lib/ssl_db
</pre>
Then restart squid
<pre>sudo service squid start</pre>