]> git.ipfire.org Git - thirdparty/squid.git/commit
Fix tls-min-version= being ignored
authorAmos Jeffries <amosjeffries@squid-cache.org>
Sat, 10 Nov 2018 04:00:12 +0000 (17:00 +1300)
committerAmos Jeffries <yadij@users.noreply.github.com>
Wed, 12 Jun 2019 11:20:09 +0000 (23:20 +1200)
commit32151ebded1afd840e8fdee00b36af7a0d08795f
treed67f65add5745d31666c26f582fffeb9207086ca
parentdd46b5417809647f561d8a5e0e74c3aacd235258
Fix tls-min-version= being ignored

Audit required change to make PeerOptions::parse() call
parseOptions() when 'options=' altered sslOptions instead of
delaying the parse to context creation.
This missed the fact that for GnuTLS the tlsMinVersion was
also updating the sslOptions string rather than the
parsedOptions variable later in the configuration process.

Call parseOptions() to reset the parsedOptions value whenever
sslOptions string is altered.
src/cache_cf.cc
src/client_side.cc
src/security/PeerOptions.cc
src/security/PeerOptions.h
src/security/Session.cc
src/security/Session.h
src/ssl/PeekingPeerConnector.cc
src/tests/stub_libsecurity.cc