socks_sspi: store socks5_gssapi_enctype

Store the unwrapped protection level in `conn->socks5_gssapi_enctype` to
prevent the proxy from contuning unprotected. Matches the GSSAPI version
of the code.

Reported-by: Trail of Bits
Closes #22004
This commit is contained in:
Daniel Stenberg 2026-06-14 12:44:44 +02:00
parent c4cb67692d
commit 5bff1c35f1
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -462,6 +462,7 @@ static CURLcode socks5_sspi_encrypt(struct Curl_cfilter *cf,
((socksreq[0] == 1) ? " GSS-API integrity" :
" GSS-API confidentiality"));
cf->conn->socks5_gssapi_enctype = socksreq[0];
return CURLE_OK;
fail: