]> git.ipfire.org Git - thirdparty/squid.git/commit
Avoid reading tls-cert=bundle twice when loading certificates (#1073)
authorAlex Rousskov <rousskov@measurement-factory.com>
Tue, 14 Jun 2022 15:24:28 +0000 (15:24 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Thu, 16 Jun 2022 16:38:47 +0000 (16:38 +0000)
commitc25648fb4eca515f8a6a535cc93c2ac2eccc292b
tree983219a4e3fbbd674ac0e1c798368feeb96b305c
parent6e541c01f8e69f6781623ded7ce21a546a911805
Avoid reading tls-cert=bundle twice when loading certificates (#1073)

After opening and reading the certificate bundle to load the required
traffic-signing certificate, Squid was opening and reading the same file
again to load the optional intermediate certificates. Loading the
traffic-signing certificate twice triggered bugs and further
complicating naturally tricky code.

No functionality changes expected except minor cache.log message changes
and certificate reporting improvements in "squid -k parse" mode.
src/security/KeyData.cc
src/security/KeyData.h