Bug fix: The ACLFilledChecklist::fd set with wrong fd for Config.ssl_client.cert_erro...

The Config.ssl_client.cert_error uses the server-side connection fd instead of
the client-side connection fd.

diff --git a/src/client_side.cc b/src/client_side.cc
index 84db45fc675b2f94c1479438727d692c15d567a3..1ad470d08b1bf10f8419b619f8e82a8bb33f9aa3 100644 (file)
--- a/src/client_side.cc
+++ b/src/client_side.cc
@@ -2516,8 +2516,6 @@ bool ConnStateData::serveDelayedError(ClientSocketContext *context)
 
             ACLFilledChecklist check(Config.ssl_client.cert_error, request, dash_str);
             check.sslErrors = new Ssl::Errors(SQUID_X509_V_ERR_DOMAIN_MISMATCH);
-            if (Comm::IsConnOpen(pinning.serverConnection))
-                check.fd(pinning.serverConnection->fd);
             const bool allowDomainMismatch =
                 check.fastCheck() == ACCESS_ALLOWED;
             delete check.sslErrors;