(trafficserver) branch master updated: Fix TLS tunneling (#11213)

[maskit]

This is an automated email from the ASF dual-hosted git repository.

maskit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/master by this push:
     new c79bb0dcd1 Fix TLS tunneling (#11213)
c79bb0dcd1 is described below

commit c79bb0dcd1f5ee526191fb7512a68274da7315e8
Author: Masakazu Kitajo <mas...@apache.org>
AuthorDate: Thu Apr 4 14:37:35 2024 -0600

    Fix TLS tunneling (#11213)
---
 src/iocore/net/SSLNetVConnection.cc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/iocore/net/SSLNetVConnection.cc 
b/src/iocore/net/SSLNetVConnection.cc
index dbff62add3..b695efb175 100644
--- a/src/iocore/net/SSLNetVConnection.cc
+++ b/src/iocore/net/SSLNetVConnection.cc
@@ -1507,7 +1507,10 @@ SSLNetVConnection::sslServerHandShakeEvent(int &err)
 #elif SSL_ERROR_WANT_X509_LOOKUP
   case SSL_ERROR_WANT_X509_LOOKUP:
 #endif
-#if defined(SSL_ERROR_WANT_SNI_RESOLVE) || defined(SSL_ERROR_WANT_X509_LOOKUP)
+#ifdef SSL_ERROR_PENDING_CERTIFICATE
+  case SSL_ERROR_PENDING_CERTIFICATE:
+#endif
+#if defined(SSL_ERROR_WANT_SNI_RESOLVE) || defined(SSL_ERROR_WANT_X509_LOOKUP) 
|| defined(SSL_ERROR_PENDING_CERTIFICATE)
     if (this->attributes == HttpProxyPort::TRANSPORT_BLIND_TUNNEL || 
SSL_HOOK_OP_TUNNEL == hookOpRequested) {
       this->attributes   = HttpProxyPort::TRANSPORT_BLIND_TUNNEL;
       sslHandshakeStatus = SSLHandshakeStatus::SSL_HANDSHAKE_ONGOING;