]> git.ipfire.org Git - thirdparty/squid.git/commit
Bug fix: TLS/SSL Options does not apply to the dynamically generated certificates
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 6 Sep 2012 13:12:26 +0000 (16:12 +0300)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 6 Sep 2012 13:12:26 +0000 (16:12 +0300)
commit86660d64fb95f949de9820e44233a273e97ebf91
tree2039298e616ee09450ed3a51786ca2fb695de3bf
parentefb18e046c172d810f76ee644b9d3be765a16332
Bug fix: TLS/SSL Options does not apply to the dynamically generated certificates

The TLS/SSL options configured with http_port configuration parameter does not
used to generate SSL_CTX context objects used to establish SSL connections.
This is means that certificate based authentication, or SSL version selection
and other SSL/TLS http_port options does not work for ssl-bumped connection.
This patch fixes this problem.

This is a Measurement Factory project
src/anyp/PortCfg.cc
src/anyp/PortCfg.h
src/client_side.cc
src/ssl/gadgets.h
src/ssl/support.cc
src/ssl/support.h
src/tests/stub_libsslsquid.cc