]> git.ipfire.org Git - thirdparty/squid.git/commitdiff
assertion failed: client_side.h:364: "sslServerBump == srvBump"
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Wed, 8 Apr 2015 15:04:41 +0000 (18:04 +0300)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Wed, 8 Apr 2015 15:04:41 +0000 (18:04 +0300)
After a failed http_access acl check of an HTTP request, tunneled through a
SSL bumped connection, ssl bumping code try to re-setup the connection for a
client-first bumping mode to serve the error crashing squid.

This is a Measurement Factory project

src/client_side_request.cc

index a702ea2621158c47e212127fec126f1022cb5ea9..502939236cf710ecaf85edc78523e6447ebc1c0d 100644 (file)
@@ -1413,7 +1413,8 @@ ClientRequestContext::sslBumpAccessCheck()
     if (bumpMode != Ssl::bumpEnd) {
         debugs(85, 5, HERE << "SslBump already decided (" << bumpMode <<
                "), " << "ignoring ssl_bump for " << http->getConn());
-        http->sslBumpNeed(bumpMode); // for processRequest() to bump if needed
+        if (!http->getConn()->serverBump())
+            http->sslBumpNeed(bumpMode); // for processRequest() to bump if needed and not already bumped
         http->al->ssl.bumpMode = bumpMode; // inherited from bumped connection
         return false;
     }