Commit 03c4691c authored by Doug MacEachern's avatar Doug MacEachern
Browse files

in proxy mode we need to SSL_connect rather than SSL_accept in 

ssl_hook_process_connection.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94298 13f79535-47bb-0310-9956-ffa450edef68
parent c9013c1e

mod_ssl.c

+11 −0
Changes for mod_ssl.c: 11 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -364,6 +364,17 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
    long verify_result;



    if (!SSL_is_init_finished(filter->pssl)) {

        if (sslconn->is_proxy) {

            if ((n = SSL_connect(filter->pssl)) <= 0) {

                ssl_log(c->base_server,

                        SSL_LOG_ERROR|SSL_ADD_SSLERR|SSL_ADD_ERRNO,

                        "SSL Proxy connect failed");

                return ssl_abort(filter, c);

            }



            return APR_SUCCESS;

        }



        if ((n = SSL_accept(filter->pssl)) <= 0) {

            err = SSL_get_error(filter->pssl, n);