[jira] [Updated] (TS-3790) action=tunnel in ssl_multicert.config will cause crash

["Susan Hinrichs (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/TS-3790?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Susan Hinrichs updated TS-3790:
-------------------------------
    Attachment: ts-3790.diff

TS-3790.diff is the code change.  Most of the lines are just indentation change.  Folding the tests so only one case checks handShakeBuffer.

> action=tunnel in ssl_multicert.config will cause crash
> ------------------------------------------------------
>
>                 Key: TS-3790
>                 URL: https://issues.apache.org/jira/browse/TS-3790
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: SSL
>            Reporter: Susan Hinrichs
>            Assignee: Susan Hinrichs
>         Attachments: ts-3790.diff
>
>
> Enabled an old line in my ssl_multicert.config and accidentally tested the action=tunnel feature.  It caused the traffic_server process to crash.  The code was assuming that a handShakeBuffer must be present if we are deciding to do a blind tunnel, but that is only the case if the decision is made in the SNI callback.  I'm going to attach a patch that fixes the problem.
> Example line that will trigger the issue.  Packets addressed to 1.2.3.4 will try to convert to blind tunnel before any SSL handshake processing is attempted.
> {code}
> dest_ip=1.2.3.4 action=tunnel ssl_cert_name=servercert.pem ssl_key_name=privkey.pem
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)