Bug 3660: ACLFilledChecklist::fd set with wrong fd for sslproxy_cert_error

The Config.ssl_client.cert_error uses the server-side connection fd instead of
the client-side connection fd.

diff --git a/src/forward.cc b/src/forward.cc
index 118e00ec4197c8e2259bb8f7a85383a9ef61e980..3504cacff329af969e576ba42777f8493a589094 100644 (file)
--- a/src/forward.cc
+++ b/src/forward.cc
@@ -767,7 +767,6 @@ FwdState::initiateSSL()
     // The list is used in ssl_verify_cb() and is freed in ssl_free().
     if (acl_access *acl = Config.ssl_client.cert_error) {
         ACLFilledChecklist *check = new ACLFilledChecklist(acl, request, dash_str);
-        check->fd(fd);
         SSL_set_ex_data(ssl, ssl_ex_index_cert_error_check, check);
     }