Use the connect-failed template when the forwarding proxy fails
authorFabian Keil <fk@fabiankeil.de>
Fri, 5 Jun 2020 11:28:48 +0000 (13:28 +0200)
committerFabian Keil <fk@fabiankeil.de>
Fri, 5 Jun 2020 13:58:24 +0000 (15:58 +0200)
... with https inspection enabled. Forwarding the response from
the proxy to the client will not work as the client expects
an encrypted response.

Sponsored by: Robert Klemme

jcc.c

diff --git a/jcc.c b/jcc.c
index 2389a8d..d0f0b34 100644 (file)
--- a/jcc.c
+++ b/jcc.c
@@ -3891,8 +3891,11 @@ static void chat(struct client_state *csp)
             {
                log_error(LOG_LEVEL_ERROR, "Forwarder hasn't established "
                   "connection with destination server.");
             {
                log_error(LOG_LEVEL_ERROR, "Forwarder hasn't established "
                   "connection with destination server.");
-
-               write_socket(csp->cfd, server_response, (size_t)len);
+               rsp = error_response(csp, "connect-failed");
+               if (rsp)
+               {
+                  send_crunch_response(csp, rsp);
+               }
                mark_server_socket_tainted(csp);
                close_client_ssl_connection(csp);
                return;
                mark_server_socket_tainted(csp);
                close_client_ssl_connection(csp);
                return;