From e5ae90aaea68ab05b4e21bebdcffabf4b5ad79a0 Mon Sep 17 00:00:00 2001
From: Alex Rousskov <rousskov@measurement-factory.com>
Date: Fri, 28 Sep 2012 10:31:25 -0600
Subject: [PATCH] ACLFilledChecklist::fd() sets the client, not server
 connection descriptor.

---
 src/forward.cc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/forward.cc b/src/forward.cc
index c5d7d7f619..a17daf14de 100644
--- a/src/forward.cc
+++ b/src/forward.cc
@@ -1013,7 +1013,8 @@ FwdState::initiateSSL()
         // The list is used in ssl_verify_cb() and is freed in ssl_free().
         if (acl_access *acl = Config.ssl_client.cert_error) {
             ACLFilledChecklist *check = new ACLFilledChecklist(acl, request, dash_str);
-            check->fd(fd);
+            if (Comm::IsConnOpen(clientConn))
+                check->fd(clientConn->fd);
             SSL_set_ex_data(ssl, ssl_ex_index_cert_error_check, check);
         }
 #if 1 // USE_SSL_CERT_VALIDATOR
-- 
2.47.3