Squid 4.14 installed on Windows 10 from MSI is missing cygcrypt-2.dll

[M4stakilla]

Hi,

I'm trying to setup Squid to use basic authentication, so I've created / copied a passwd file (using htpasswd on an Ubuntu VM with the default md5 encryption) to my Squid installation and configured it as below:

# Added for basic password authentication
auth_param basic program c:/Squid/lib/squid/basic_ncsa_auth.exe c:/Squid/etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid Basic Authentication
auth_param basic credentialsttl 2 hours
acl auth_users proxy_auth REQUIRED
http_access allow auth_users

But whenever I try to authenticate to the proxy, my log file gets flooded with below error messages:

2021/07/01 12:58:10| Starting new basicauthenticator helpers...
2021/07/01 12:58:10| helperOpenServers: Starting 1/5 'basic_ncsa_auth.exe' processes
2021/07/01 12:58:10| WARNING: no_suid: setuid(0): (22) Invalid argument
2021/07/01 12:58:11| WARNING: basicauthenticator #Hlpr6 exited
2021/07/01 12:58:11| Too few basicauthenticator processes are running (need 1/5)
2021/07/01 12:58:11| Starting new helpers
2021/07/01 12:58:11| helperOpenServers: Starting 1/5 'basic_ncsa_auth.exe' processes
C:/Squid/lib/squid/basic_ncsa_auth.exe: error while loading shared libraries: cygcrypt-2.dll: cannot open shared object file: No such file or directory
2021/07/01 12:58:11| WARNING: no_suid: setuid(0): (22) Invalid argument
2021/07/01 12:58:11| WARNING: basicauthenticator #Hlpr7 exited

I've searched my system and could not find cygcrypt-2.dll anywhere (lib/squid is full with similar dlls, but not this one).
I've also tried executing basic_ncsa_auth.exe with an admin command prompt and it also fails with a popup complaining that the dll is missing.

What can I do to solve this? Can I for example use a different encryption when using htpassswd to circumvent this issue?

Thanks!

[ra-at-diladele-com]

Might need to pack it. I will take a look.

[M4stakilla]

Thanks a lot for the lightning quick reply!! 👍

Anything I can do already to work around this?

[ra-at-diladele-com]

Only build by yourself and manually copy the required dll in place.

[M4stakilla]

I suppose you mean:

1. Install Cygwin on Windows
2. Compile Squid from source inside Cygwin?
   ?

Meaning that cygcrypt-2.dll is part of of Squid itself?

Just a crazy idea: Do you perhaps have this dll on your system? Would you mind uploading it somewhere?

[ra-at-diladele-com]

cyg prefix makes me think it is part of cygwin.

[M4stakilla]

good point :)

[M4stakilla]

Ok I've just tried a couple things:
My work laptop (Windows 7) does have Cygwin64 installed, so I tried to find the dll on that, but it didn't exist their either. (only older versions)
I don't really know which exact cygwin package I need to install or update to get that exact version, so I tried to google for the dll. I didn't find the required info to build it myself, but I did find a download link for that file. Of course I don't trust a downloaded dll, so I've uploaded it first to virustotal.com to make sure it is clean.
After copying it into lib/squid I now no longer get the error that the dll is missing, but it still doesn't work:

2021/07/01 13:19:24| Starting new basicauthenticator helpers...
2021/07/01 13:19:24| helperOpenServers: Starting 1/5 'basic_ncsa_auth.exe' processes
2021/07/01 13:19:24| WARNING: no_suid: setuid(0): (22) Invalid argument
2021/07/01 13:19:24| WARNING: basicauthenticator #Hlpr6 exited
2021/07/01 13:19:24| Too few basicauthenticator processes are running (need 1/5)
2021/07/01 13:19:24| Starting new helpers
2021/07/01 13:19:24| helperOpenServers: Starting 1/5 'basic_ncsa_auth.exe' processes
2021/07/01 13:19:24| WARNING: no_suid: setuid(0): (22) Invalid argument
2021/07/01 13:19:24| WARNING: basicauthenticator #Hlpr7 exited
2021/07/01 13:19:24| Too few basicauthenticator processes are running (need 1/5)
2021/07/01 13:19:24| Starting new helpers
2021/07/01 13:19:24| helperOpenServers: Starting 1/5 'basic_ncsa_auth.exe' processes
2021/07/01 13:19:24| WARNING: no_suid: setuid(0): (22) Invalid argument
2021/07/01 13:19:25| WARNING: basicauthenticator #Hlpr8 exited
2021/07/01 13:19:25| Too few basicauthenticator processes are running (need 1/5)
2021/07/01 13:19:25| Starting new helpers

When executing basic_ncsa_auth.exe from a command prompt, I get a popup with application error 0xc000007b, which still seems to indicate a problem with dlls (not sure if the problem is still with the same dll or a different one though)

[M4stakilla]

Just downloaded the latest cygwin64 and when I search for Squid as package it only has v3.3.3-1 or 3.3.3-2 as an option. No v4 at all? Also are all the dll that I require included in this squid package? Or do I need additional packages (like openssh or something)?

[MORI-HAMAMATSU]

M4stakilla
I had same problem as you but solved.

1. Download Cygwin installer from https://www.cygwin.com
2. Install Cygwin(*1)
3. Copy cygwin64\bin\cygcrypt-2.dll to c:\Squid\lib\squid\ and C:\Squid\bin

*1
I select all packages to install but it took very long time and I think it was not necessary.
Maybe only need to install is Libcrypt2(https://cygwin.com/packages/summary/libcrypt2.html)

[M4stakilla]

Thanks, in contrary to downloading the dll from the internet, your instructions did work flawlessly!

I now have a working password protected Squid installation...

[M4stakilla]

Just fyi (not sure if this is an actual issue that needs to be solved):
I'm still getting below warning frequently in my log file:
2021/07/06 12:18:52| WARNING: no_suid: setuid(0): (22) Invalid argument

[afzafri]

M4stakilla I had same problem as you but solved.

1. Download Cygwin installer from https://www.cygwin.com
2. Install Cygwin(*1)
3. Copy cygwin64\bin\cygcrypt-2.dll to c:\Squid\lib\squid\ and C:\Squid\bin

*1 I select all packages to install but it took very long time and I think it was not necessary. Maybe only need to install is Libcrypt2(https://cygwin.com/packages/summary/libcrypt2.html)

I installed Cygwin but weird I can't find the cygcrypt-2.dll file. I installed all packages in the Cygwin, and libcrypt2 package is not listed in the installer too.

[tbone2k-git]

Same problem here, found issue by accident as I tried to run "basic_ncsa_auth.exe" manually. It was putting up a dailog/requester and complained about "cygcrypt-2.dll" not being present (such a requester would block any headless execution I guess? why is it not writing to console?).

• To prevent installing/downloading all the packages, select "All" root node first, then chose "Uninstall".
• Then use the search box at the top to search for "libcrypt2", select "Reinstall" in the checkbox and choose a version.
• After "Next / Next .." and a few seconds I had a file..
  ..\cygwin64_setup<chosen mirror url>\x86_64\release\libxcrypt\libcrypt2\libcrypt2-4.4.20-1.tar.xz
• I entered this *.tar.xz file with Directory Opus' integrated archive handler and found the cygcrypt-2.dll in there:
  libcrypt2-4.4.20-1.tar.xz\usr\bin\cygcrypt-2.dll
• Put dll into "..\Squid\lib\squid.."
• basic_ncsa_auth.exe now runs, does not complain, process does not quit (I guess that's how it's meant to be).

Squid/the basic authentication is not working yet though.. (playing around with squid for the first time, looking for log file or something right now..).