From 36441bb364ebdba276302a3651d678d8a5843eaf Mon Sep 17 00:00:00 2001
From: Juan <jdsq12@yahoo.es>
Date: Thu, 30 Jun 2011 22:21:53 -0600
Subject: [PATCH] Bug 2138: NTLM passthrough using accel cache_peer and ssl

This is a temporary workaround for 3.1 series. A better fix for 3.2 and
later is known but needs verifiction.
---
 src/forward.cc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/forward.cc b/src/forward.cc
index 45f623a723..5b1f9feb43 100644
--- a/src/forward.cc
+++ b/src/forward.cc
@@ -756,8 +756,10 @@ FwdState::connectDone(int aServerFD, const DnsLookupDetails &dns, comm_err_t sta
 
         if ((fs->_peer && fs->_peer->use_ssl) ||
                 (!fs->_peer && request->protocol == PROTO_HTTPS)) {
-            initiateSSL();
-            return;
+            if (fs->code != PINNED) {
+                initiateSSL();
+                return;
+            }
         }
 
 #endif
-- 
2.47.2