]> git.ipfire.org Git - thirdparty/squid.git/commit
Honor on_unsupported_protocol for intercepted https_port (#689)
authorAlex Rousskov <rousskov@measurement-factory.com>
Mon, 6 Jul 2020 08:04:31 +0000 (08:04 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Fri, 10 Jul 2020 13:09:22 +0000 (13:09 +0000)
commit6ed687678083f413bb4d57fb5985968204860898
tree341c9d3e303ef7ed297cee53c55fbe85345e07ae
parentc9b04b35d75746c0720904741f7a34eea638f43b
Honor on_unsupported_protocol for intercepted https_port (#689)

... when Squid discovers a non-TLS client while parsing its handshake.

For https_port traffic, ConnStateData::switchToHttps() relies on start()
to set preservingClientData_ correctly, but shouldPreserveClientData(),
called by start() to set preservingClientData_, was not preserving TLS
bytes in the https_port start() context. Typical debug messages:

    parseTlsHandshake: Got something other than TLS ... Cannot SslBump
    tunnelOnError: may have forgotten client data; send error: 40
src/client_side.cc