From: Christos Tsantilas <chtsanti@users.sourceforge.net>
Date: Fri, 25 May 2012 08:36:31 +0000 (+0300)
Subject: Preserve bumped client IP
X-Git-Tag: BumpSslServerFirst.take08~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f2f98ccaebb4d930a5ec206a72be2263eacfe48d;p=thirdparty%2Fsquid.git

Preserve bumped client IP

The bumped tproxied connections does not use the client IP as the source address
from web server point of view in the case of bump-server-first mode.
---

diff --git a/src/client_side.cc b/src/client_side.cc
index eca721cf01..6fe7702e5e 100644
--- a/src/client_side.cc
+++ b/src/client_side.cc
@@ -3562,7 +3562,7 @@ httpsEstablish(ConnStateData *connState,  SSL_CTX *sslContext, Ssl::BumpMode bum
         fakeRequest->indirect_client_addr = connState->clientConnection->remote;
 #endif
         fakeRequest->my_addr = connState->clientConnection->local;
-
+        fakeRequest->flags.spoof_client_ip = ((connState->clientConnection->flags & COMM_TRANSPARENT) != 0 ) ;
         debugs(33, 4, HERE << details << " try to generate a Dynamic SSL CTX");
         connState->switchToHttps(fakeRequest, bumpMode);
     }