]> git.ipfire.org Git - thirdparty/squid.git/commit - src/client_side_reply.cc
Bump-server-first fails with SQUID_X509_V_ERR_DOMAIN_MISMATCH error BumpSslServerFirst.take03
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Fri, 6 Jan 2012 12:01:42 +0000 (14:01 +0200)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Fri, 6 Jan 2012 12:01:42 +0000 (14:01 +0200)
commit8eb0a7eeeada3d85ab134acf6b8dd228fbba2e81
tree13de918b3bcb78eeae9cb50031db546260b310a0
parente7a7152c5d209670edf3704a07eda7a3c4aabe68
Bump-server-first fails with SQUID_X509_V_ERR_DOMAIN_MISMATCH error

When the bump-server-first used we do not always know the hostname of the server
we are connecting to. Thus the the hostname validity check for the
SSL server certificate will fail with SQUID_X509_V_ERR_DOMAIN_MISMATCH error.

This patch does not check if server certificate is valid for the hostname on
bump-server-first case and move this check after the http request received
from the web client
src/client_side.cc
src/client_side.h
src/client_side_reply.cc
src/client_side_reply.h
src/forward.cc
src/ssl/support.cc
src/ssl/support.h