From: Amos Jeffries <squid3@treenet.co.nz>
Date: Fri, 4 Nov 2011 23:28:49 +0000 (+1300)
Subject: Bug 3367: fix inverted check on host_strict_verify
X-Git-Tag: BumpSslServerFirst.take01~45
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=06059513d3b262e37f9ca9963f38d3c5713d7608;p=thirdparty%2Fsquid.git

Bug 3367: fix inverted check on host_strict_verify
---

diff --git a/src/client_side_request.cc b/src/client_side_request.cc
index 03b54dd108..3b0728a7a6 100644
--- a/src/client_side_request.cc
+++ b/src/client_side_request.cc
@@ -634,7 +634,7 @@ ClientRequestContext::hostHeaderVerify()
             // verify the destination DNS is one of the Host: headers IPs
             ipcache_nbgethostbyname(host, hostHeaderIpVerifyWrapper, this);
         }
-    } else if (Config.onoff.hostStrictVerify) {
+    } else if (!Config.onoff.hostStrictVerify) {
         debugs(85, 3, HERE << "validate skipped.");
         http->doCallouts();
     } else if (strlen(host) != strlen(http->request->GetHost())) {