From d20cad0ae40d1343aa4a917137b89133ba598719 Mon Sep 17 00:00:00 2001
From: Christos Tsantilas <chtsanti@users.sourceforge.net>
Date: Tue, 25 Sep 2012 17:51:20 +0300
Subject: [PATCH] Bug fix: The ACLFilledChecklist::fd set with wrong fd for
 Config.ssl_client.cert_error acl list

The Config.ssl_client.cert_error uses the server-side connection fd instead of
the client-side connection fd.
---
 src/client_side.cc | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/client_side.cc b/src/client_side.cc
index 84db45fc67..1ad470d08b 100644
--- a/src/client_side.cc
+++ b/src/client_side.cc
@@ -2516,8 +2516,6 @@ bool ConnStateData::serveDelayedError(ClientSocketContext *context)
 
             ACLFilledChecklist check(Config.ssl_client.cert_error, request, dash_str);
             check.sslErrors = new Ssl::Errors(SQUID_X509_V_ERR_DOMAIN_MISMATCH);
-            if (Comm::IsConnOpen(pinning.serverConnection))
-                check.fd(pinning.serverConnection->fd);
             const bool allowDomainMismatch =
                 check.fastCheck() == ACCESS_ALLOWED;
             delete check.sslErrors;
-- 
2.47.2