From: Alex Rousskov <rousskov@measurement-factory.com>
Date: Fri, 28 Sep 2012 16:31:25 +0000 (-0600)
Subject: ACLFilledChecklist::fd() sets the client, not server connection descriptor.
X-Git-Tag: SQUID_3_4_0_1~458^2~7^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e5ae90aaea68ab05b4e21bebdcffabf4b5ad79a0;p=thirdparty%2Fsquid.git

ACLFilledChecklist::fd() sets the client, not server connection descriptor.
---

diff --git a/src/forward.cc b/src/forward.cc
index c5d7d7f619..a17daf14de 100644
--- a/src/forward.cc
+++ b/src/forward.cc
@@ -1013,7 +1013,8 @@ FwdState::initiateSSL()
         // The list is used in ssl_verify_cb() and is freed in ssl_free().
         if (acl_access *acl = Config.ssl_client.cert_error) {
             ACLFilledChecklist *check = new ACLFilledChecklist(acl, request, dash_str);
-            check->fd(fd);
+            if (Comm::IsConnOpen(clientConn))
+                check->fd(clientConn->fd);
             SSL_set_ex_data(ssl, ssl_ex_index_cert_error_check, check);
         }
 #if 1 // USE_SSL_CERT_VALIDATOR