]> git.ipfire.org Git - thirdparty/squid.git/commit
Bug fix: src ACL broken with sslproxy_cert_error
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Mon, 23 Apr 2012 16:34:04 +0000 (19:34 +0300)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Mon, 23 Apr 2012 16:34:04 +0000 (19:34 +0300)
commit23670c61085542346f30bde8fb2b3729cb021b12
tree3d8db83172d4a5ac9dd943251a736e3754dd9842
parenta06042fa72920ee3dd5f36bd906191c773e6bd42
Bug fix: src ACL broken with sslproxy_cert_error

The following Squid configuration uses src ACL with sslproxy_cert_error:
   acl me src 172.16.101.51
   sslproxy_cert_error allow me
Cache log shows that the source IP address is missing when the 'me' ACL
is checked for sslproxy_cert_error:
   | ACL::checklistMatches: checking 'me'
   | aclIpAddrNetworkCompare: compare: *[::]/[ff...ff] ([::])*  vs ...
   | aclIpMatchIp: '[::]' NOT found

The problem is that the HttpRequest::client_addr is not set, for  the fake
HTTPS request created to initiate the  bump-server-first procedure.
src/client_side.cc