TLS: Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling (#898)

diff --git a/src/security/PeerConnector.cc b/src/security/PeerConnector.cc
index 58db7b0571c922f9f29af9b8adc613f4cc7fc775..c601fffb2a9c0bb1086deed100e5ac1d96bfeab7 100644 (file)
--- a/src/security/PeerConnector.cc
+++ b/src/security/PeerConnector.cc
@@ -653,11 +653,11 @@ Security::PeerConnector::handleMissingCertificates(const Security::IoResult &ioR
     Must(callerHandlesMissingCertificates);
     callerHandlesMissingCertificates = false;
 
-    if (!computeMissingCertificateUrls(sconn))
-        return handleNegotiationResult(ioResult);
-
     suspendNegotiation(ioResult);
 
+    if (!computeMissingCertificateUrls(sconn))
+        return resumeNegotiation();
+
     assert(!urlsOfMissingCerts.empty());
     startCertDownloading(urlsOfMissingCerts.front());
     urlsOfMissingCerts.pop();