]> git.ipfire.org Git - thirdparty/squid.git/commit
Unexpected SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid...
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Sun, 26 Apr 2015 16:44:23 +0000 (09:44 -0700)
committerAmos Jeffries <squid3@treenet.co.nz>
Sun, 26 Apr 2015 16:44:23 +0000 (09:44 -0700)
commit2988a7efdde95ba4f5c8eff195bb82cd09cd6365
tree9f12b1b39025cd0499c2dc0938296fdf2ec422a0
parent38090d2bd475ee8d1df1bbf9c488e8eb882e92a8
Unexpected SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid certificates

A "const char *" pointer retrieved using the SBuf::c_str() method may attached
to an SSL object using the SSL_set_ex_data method as server name used to
validate server certificates. This pointer may become invalid, causing
the SQUID_X509_V_ERR_DOMAIN_MISMATCH errors.

This patch changes the type of the ssl_ex_index_server index used with the
SSL_set_ex_data function to be an SBuf object.

This is a Measurement Factory project
src/ssl/PeerConnector.cc
src/ssl/support.cc