squid-3.5.20-ssl-forgery.patch

diff -ur squid-3.5.20-orig/src/client_side_request.cc squid-3.5.20/src/client_side_request.cc
--- squid-3.5.20-orig/src/client_side_request.cc	2016-07-01 13:37:50.000000000 +0200
+++ squid-3.5.20/src/client_side_request.cc	2017-03-10 16:48:08.920084072 +0100
@@ -530,6 +530,10 @@
             }
             debugs(85, 3, HERE << "validate IP " << clientConn->local << " non-match from Host: IP " << ia->in_addrs[i]);
         }
+	// disable fogery check. See https://code.nethesis.it/Nethesis/dev/issues/5088
+        http->request->flags.hostVerified = true;
+        http->doCallouts();
+        return;
     }
     debugs(85, 3, HERE << "FAIL: validate IP " << clientConn->local << " possible from Host:");
     hostHeaderVerifyFailed("local IP", "any domain IP");