From: Christos Tsantilas <chtsanti@users.sourceforge.net>
Date: Wed, 8 Apr 2015 15:04:41 +0000 (+0300)
Subject: assertion failed: client_side.h:364: "sslServerBump == srvBump"
X-Git-Tag: merge-candidate-3-v1~190
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b4049e382abe792581f44673c357dd79e7fa343c;p=thirdparty%2Fsquid.git

assertion failed: client_side.h:364: "sslServerBump == srvBump"

After a failed http_access acl check of an HTTP request, tunneled through a
SSL bumped connection, ssl bumping code try to re-setup the connection for a
client-first bumping mode to serve the error crashing squid.

This is a Measurement Factory project
---

diff --git a/src/client_side_request.cc b/src/client_side_request.cc
index a702ea2621..502939236c 100644
--- a/src/client_side_request.cc
+++ b/src/client_side_request.cc
@@ -1413,7 +1413,8 @@ ClientRequestContext::sslBumpAccessCheck()
     if (bumpMode != Ssl::bumpEnd) {
         debugs(85, 5, HERE << "SslBump already decided (" << bumpMode <<
                "), " << "ignoring ssl_bump for " << http->getConn());
-        http->sslBumpNeed(bumpMode); // for processRequest() to bump if needed
+        if (!http->getConn()->serverBump())
+            http->sslBumpNeed(bumpMode); // for processRequest() to bump if needed and not already bumped
         http->al->ssl.bumpMode = bumpMode; // inherited from bumped connection
         return false;
     }