[squid-dev] Hello and ssl_bump and External ACLs - 4.0.2

Amos Jeffries squid3 at treenet.co.nz
Tue Nov 24 10:38:48 UTC 2015


On 24/11/2015 11:21 p.m., Christos Tsantilas wrote:
> I am attaching a small (not well tested) patch, which fixed a similar
> problem for me, in the case someone want to test it.
> 
> Amos,
>  should we try to retrieve ALE object from
> HttpRequest->clientConnectionManager->getCurrentContext()->http->al, or
> other sources, inside ACLFilledChecklist::syncAle(), if it is not set?
> 

Short answer is yes. For request being a source at least, not sure about
other sources.

There is also the problem that intercept ports going via
ConnStateData::postHttpsAccept() dont setup a CONNECT context at all,
just generate an HttpRequest and use it directly.

Amos



More information about the squid-dev mailing list