Re: sslcrtvalidator_program input not separated by "\1"?

> I see that note in the documentation predates the protocol change to 
> include size parameters.
> 
> In modern Squid it only applies to the **response** from certificate 
> generator/validator helpers back to Squid.

I sorta assumed such a thing, but wasn't sure.

> Your helper should do what the example 'fake' helper does;
>   * read one '\n' terminated line of input.
>   * parse the ( result SP size SP ) out of that first line
>   * loop until more '\n' terminated lines have arrived providing a
> total of 'size' bytes worth of kv-pairs (aka "body").
>   * ignore any garbage received on final \n terminated line (should
> only be a CRLF).
>   * send reply followed by the '\1' character.

Thanks for the detailed explanation. I've changed my script accordingly
and now the interaction behaves as expected.

Thank you for the clarifications!