From: Alex Rousskov <rousskov@measurement-factory.com>
Date: Fri, 24 Sep 2021 20:10:37 +0000 (+0000)
Subject: Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling (#898)
X-Git-Tag: SQUID_6_0_1~289
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=43d6b5c81b88ec2256b430c69a872a1e4f324e4a;p=thirdparty%2Fsquid.git

Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling (#898)
---

diff --git a/src/security/PeerConnector.cc b/src/security/PeerConnector.cc
index 3637e7776e..7d9a3a8733 100644
--- a/src/security/PeerConnector.cc
+++ b/src/security/PeerConnector.cc
@@ -715,11 +715,11 @@ Security::PeerConnector::handleMissingCertificates(const Security::IoResult &ioR
     Must(callerHandlesMissingCertificates);
     callerHandlesMissingCertificates = false;
 
-    if (!computeMissingCertificateUrls(sconn))
-        return handleNegotiationResult(ioResult);
-
     suspendNegotiation(ioResult);
 
+    if (!computeMissingCertificateUrls(sconn))
+        return resumeNegotiation();
+
     assert(!urlsOfMissingCerts.empty());
     startCertDownloading(urlsOfMissingCerts.front());
     urlsOfMissingCerts.pop();