]> git.kaiwu.me - haproxy.git/commit
BUG: ssl: mark the connection as waiting for an SSL connection during the handshake
authorWilly Tarreau <w@1wt.eu>
Tue, 4 Sep 2012 06:03:39 +0000 (08:03 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 4 Sep 2012 06:03:39 +0000 (08:03 +0200)
commit0573747da08f13547473db286631d54d36a4db9f
tree2a963fc111d27939c3226f285f9ae70a4b1bbb13
parentc230b8bfb65cbcf4028187dd5a3225f6b928d194
BUG: ssl: mark the connection as waiting for an SSL connection during the handshake

The WAIT_L6_CONN was designed especially to ensure that the connection
was not marked ready before the SSL layer was OK, but we forgot to set
the flag, resulting in a rejected handshake when ssl was combined with
accept-proxy because accept-proxy would validate the connection alone
and the SSL handshake would then believe in a client-initiated reneg
and kill it.
src/ssl_sock.c