Skip to content

Conversation

@somecookie
Copy link
Contributor

2023 commit 4e14397 accidentally removed code that was setting
detailEntry data member, breaking %ssl_error_descr expansion:
Security::ErrorDetail::printErrorDescription() would always print
[Not available].

Squid still printed non-configurable request-independent error code
name correctly because the corresponding printErrorCode() method
only uses detailEntry as a performance optimization.

The effects of this fix are visible, for example, in generated
ERR_SECURE_CONNECT_FAIL error responses:

- <p>[Not available]: /CN=...</p>
+ <p>Certificate does not match domainname: /CN=...</p>

This is a Measurement Factory project.

@somecookie somecookie marked this pull request as ready for review January 30, 2026 09:26
Copy link
Contributor

@rousskov rousskov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for fixing this regression.

@rousskov rousskov added M-cleared-for-merge https://github.com/measurement-factory/anubis#pull-request-labels S-could-use-an-approval An approval may speed this PR merger (but is not required) labels Jan 30, 2026
Copy link
Contributor

@kinkie kinkie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

squid-anubis pushed a commit that referenced this pull request Feb 1, 2026
2023 commit 4e14397 accidentally removed code that was setting
`detailEntry` data member, breaking `%ssl_error_descr` expansion:
`Security::ErrorDetail::printErrorDescription()` would always print
`[Not available]`.

Squid still printed non-configurable request-independent error code
_name_ correctly because the corresponding `printErrorCode()` method
only uses `detailEntry` as a performance optimization.

The effects of this fix are visible, for example, in generated
ERR_SECURE_CONNECT_FAIL error responses:

```diff
- <p>[Not available]: /CN=...</p>
+ <p>Certificate does not match domainname: /CN=...</p>
```

This is a Measurement Factory project.
@squid-anubis squid-anubis added M-waiting-staging-checks https://github.com/measurement-factory/anubis#pull-request-labels M-failed-staging-checks https://github.com/measurement-factory/anubis#pull-request-labels and removed M-waiting-staging-checks https://github.com/measurement-factory/anubis#pull-request-labels labels Feb 1, 2026
@rousskov rousskov removed the S-could-use-an-approval An approval may speed this PR merger (but is not required) label Feb 2, 2026
@rousskov
Copy link
Contributor

rousskov commented Feb 2, 2026

make[5]: Entering directory '/__w/squid/squid/btlayer-02-maximus/errors'
ModuleNotFoundError: No module named 'unicode_segmentation_rs'
make[5]: *** [Makefile:756: ar.lang] Error 1

@kinkie, would you mind checking our debian-testing node? The corresponding staged tests have been failing for a while. I hope the node just needs some additional Python modules installed to resume working as expected, but I did not investigate further. Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

M-cleared-for-merge https://github.com/measurement-factory/anubis#pull-request-labels M-failed-staging-checks https://github.com/measurement-factory/anubis#pull-request-labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants