From: Christos Tsantilas <chtsanti@users.sourceforge.net>
Date: Wed, 3 Oct 2012 01:08:20 +0000 (-0600)
Subject: Bug 3660: ACLFilledChecklist::fd set with wrong fd for sslproxy_cert_error
X-Git-Tag: SQUID_3_2_2~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=32a3fb47ebc7180f45cf69c1f94a48fa52b90dbb;p=thirdparty%2Fsquid.git

Bug 3660: ACLFilledChecklist::fd set with wrong fd for sslproxy_cert_error

The Config.ssl_client.cert_error uses the server-side connection fd instead of
the client-side connection fd.
---

diff --git a/src/forward.cc b/src/forward.cc
index 118e00ec41..3504cacff3 100644
--- a/src/forward.cc
+++ b/src/forward.cc
@@ -767,7 +767,6 @@ FwdState::initiateSSL()
     // The list is used in ssl_verify_cb() and is freed in ssl_free().
     if (acl_access *acl = Config.ssl_client.cert_error) {
         ACLFilledChecklist *check = new ACLFilledChecklist(acl, request, dash_str);
-        check->fd(fd);
         SSL_set_ex_data(ssl, ssl_ex_index_cert_error_check, check);
     }