summaryrefslogtreecommitdiff
path: root/lib/connect.c
diff options
context:
space:
mode:
authorStefan Eissing <stefan@eissing.org>2023-04-11 16:34:01 +0200
committerDaniel Stenberg <daniel@haxx.se>2023-04-12 08:51:14 +0200
commitdd8130406e832b76b2c8fbcdacca4ddf3c18db11 (patch)
treef29bbb87ccc6709abd2455872a0359f9df01513f /lib/connect.c
parentfb08dd9c90a2a7ff77a3f7fc8916bb440401506a (diff)
downloadcurl-dd8130406e832b76b2c8fbcdacca4ddf3c18db11.tar.gz
connect: fix https connection setup to treat ssl_mode correctly
- for HTTPS protocol, a disabled ssl should never be acceptables. Closes #10934
Diffstat (limited to 'lib/connect.c')
-rw-r--r--lib/connect.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/lib/connect.c b/lib/connect.c
index 7624794cf..87f5b2ed1 100644
--- a/lib/connect.c
+++ b/lib/connect.c
@@ -1409,9 +1409,8 @@ CURLcode Curl_conn_setup(struct Curl_easy *data,
#if !defined(CURL_DISABLE_HTTP) && !defined(USE_HYPER)
if(!conn->cfilter[sockindex] &&
- conn->handler->protocol == CURLPROTO_HTTPS &&
- (ssl_mode == CURL_CF_SSL_ENABLE || ssl_mode != CURL_CF_SSL_DISABLE)) {
-
+ conn->handler->protocol == CURLPROTO_HTTPS) {
+ DEBUGASSERT(ssl_mode != CURL_CF_SSL_DISABLE);
result = Curl_cf_https_setup(data, conn, sockindex, remotehost);
if(result)
goto out;