From 7cf0c59fa4fbeecb8be08a0be0f21d666d356292 Mon Sep 17 00:00:00 2001
From: "ddrinan%netscape.com"
 <ddrinan%netscape.com@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Thu, 28 Jun 2001 20:12:40 +0000
Subject: [PATCH] Checking fix for bug 87902 for Javi.
 r=ddrinan,sr=brendan,a=asa

git-svn-id: svn://10.0.0.236/trunk@98199 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/security/manager/ssl/src/nsNSSIOLayer.cpp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/mozilla/security/manager/ssl/src/nsNSSIOLayer.cpp b/mozilla/security/manager/ssl/src/nsNSSIOLayer.cpp
index 202120ead5d..9bed28b4158 100644
--- a/mozilla/security/manager/ssl/src/nsNSSIOLayer.cpp
+++ b/mozilla/security/manager/ssl/src/nsNSSIOLayer.cpp
@@ -1832,6 +1832,12 @@ nsSSLIOLayerSetOptions(PRFileDesc *fd, PRBool forTLSStepUp,
     }
   }
 
+  // Since we can't dumb down a connection through a proxy,
+  // let's not do TLS if we're connecting through a proxy.
+  if (proxyHost && SECSuccess != SSL_OptionSet(fd, SSL_ENABLE_TLS, PR_FALSE)){
+    return NS_ERROR_FAILURE;
+  }
+
   if (SECSuccess != SSL_OptionSet(fd, SSL_HANDSHAKE_AS_CLIENT, PR_TRUE)) {
     return NS_ERROR_FAILURE;
   }
@@ -1912,6 +1918,7 @@ nsSSLIOLayerAddToSocket(const char* host,
 
   rv = nsSSLIOLayerSetOptions(layer, forTLSStepUp, proxyHost, host, port,
                               infoObject);
+
   if (NS_FAILED(rv))
     goto loser;