From: Alex Rousskov <rousskov@measurement-factory.com>
Date: Fri, 24 Sep 2021 20:10:37 +0000 (+0000)
Subject: TLS: Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling (#898)
X-Git-Tag: SQUID_5_2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=533b4359f16cf9ed15a6d709a57a4b06e4222cfe;p=thirdparty%2Fsquid.git

TLS: Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling (#898)
---

diff --git a/src/security/PeerConnector.cc b/src/security/PeerConnector.cc
index 58db7b0571..c601fffb2a 100644
--- a/src/security/PeerConnector.cc
+++ b/src/security/PeerConnector.cc
@@ -653,11 +653,11 @@ Security::PeerConnector::handleMissingCertificates(const Security::IoResult &ioR
     Must(callerHandlesMissingCertificates);
     callerHandlesMissingCertificates = false;
 
-    if (!computeMissingCertificateUrls(sconn))
-        return handleNegotiationResult(ioResult);
-
     suspendNegotiation(ioResult);
 
+    if (!computeMissingCertificateUrls(sconn))
+        return resumeNegotiation();
+
     assert(!urlsOfMissingCerts.empty());
     startCertDownloading(urlsOfMissingCerts.front());
     urlsOfMissingCerts.pop();