From: Christos Tsantilas Date: Wed, 8 Apr 2015 15:32:14 +0000 (+0300) Subject: httpsEstablish: remove unused code X-Git-Tag: merge-candidate-3-v1~189 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=36048c4244f951cb23b2e8e3b01082c54b635ca2;p=thirdparty%2Fsquid.git httpsEstablish: remove unused code --- diff --git a/src/client_side.cc b/src/client_side.cc index 90f451b293..8ea41a578e 100644 --- a/src/client_side.cc +++ b/src/client_side.cc @@ -3708,13 +3708,13 @@ clientNegotiateSSL(int fd, void *data) * Otherwise, calls switchToHttps to generate a dynamic SSL_CTX. */ static void -httpsEstablish(ConnStateData *connState, SSL_CTX *sslContext, Ssl::BumpMode bumpMode) +httpsEstablish(ConnStateData *connState, SSL_CTX *sslContext) { SSL *ssl = NULL; assert(connState); const Comm::ConnectionPointer &details = connState->clientConnection; - if (sslContext && !(ssl = httpsCreate(details, sslContext))) + if (!sslContext || !(ssl = httpsCreate(details, sslContext))) return; typedef CommCbMemFunT TimeoutDialer; @@ -3722,34 +3722,7 @@ httpsEstablish(ConnStateData *connState, SSL_CTX *sslContext, Ssl::BumpMode bum connState, ConnStateData::requestTimeout); commSetConnTimeout(details, Config.Timeout.request, timeoutCall); - if (ssl) - Comm::SetSelect(details->fd, COMM_SELECT_READ, clientNegotiateSSL, connState, 0); - else { - char buf[MAX_IPSTRLEN]; - assert(bumpMode != Ssl::bumpNone && bumpMode != Ssl::bumpEnd); - HttpRequest::Pointer fakeRequest(new HttpRequest); - fakeRequest->SetHost(details->local.toStr(buf, sizeof(buf))); - fakeRequest->port = details->local.port(); - fakeRequest->clientConnectionManager = connState; - fakeRequest->client_addr = connState->clientConnection->remote; -#if FOLLOW_X_FORWARDED_FOR - fakeRequest->indirect_client_addr = connState->clientConnection->remote; -#endif - fakeRequest->my_addr = connState->clientConnection->local; - fakeRequest->flags.interceptTproxy = ((connState->clientConnection->flags & COMM_TRANSPARENT) != 0 ) ; - fakeRequest->flags.intercepted = ((connState->clientConnection->flags & COMM_INTERCEPTION) != 0); - fakeRequest->myportname = connState->port->name; - if (fakeRequest->flags.interceptTproxy) { - if (Config.accessList.spoof_client_ip) { - ACLFilledChecklist checklist(Config.accessList.spoof_client_ip, fakeRequest.getRaw(), NULL); - fakeRequest->flags.spoofClientIp = (checklist.fastCheck() == ACCESS_ALLOWED); - } else - fakeRequest->flags.spoofClientIp = true; - } else - fakeRequest->flags.spoofClientIp = false; - debugs(33, 4, HERE << details << " try to generate a Dynamic SSL CTX"); - connState->switchToHttps(fakeRequest.getRaw(), bumpMode); - } + Comm::SetSelect(details->fd, COMM_SELECT_READ, clientNegotiateSSL, connState, 0); } /** @@ -3849,7 +3822,7 @@ ConnStateData::postHttpsAccept() return; } else { SSL_CTX *sslContext = port->staticSslContext.get(); - httpsEstablish(this, sslContext, Ssl::bumpNone); + httpsEstablish(this, sslContext); } }