]> git.ipfire.org Git - thirdparty/squid.git/commit
Add http_port sslflags=CONDITIONAL_AUTH (#510)
authortrapexit <trapexit@spawn.link>
Sun, 9 Aug 2020 06:14:51 +0000 (06:14 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Sun, 9 Aug 2020 06:14:55 +0000 (06:14 +0000)
commit983fab6e9ea971228eeb6e09ab55bedf113d1d7b
tree27dff41e023ae61c2d0f810cf5ae3fc7ce5256c7
parent9ba9313a0d6d32223e590aecc90cd0bf2efbbba4
Add http_port sslflags=CONDITIONAL_AUTH (#510)

Enabling this flag removes SSL_VERIFY_FAIL_IF_NO_PEER_CERT from the
SSL_CTX_set_verify callback. Meaning a client certificate verify
occurs iff provided.
src/cf.data.pre
src/security/PeerOptions.cc
src/security/PeerOptions.h
src/security/ServerOptions.cc
src/security/forward.h
src/ssl/support.cc
src/ssl/support.h
src/tests/stub_libsslsquid.cc