Merge pull request #24 from GetPageSpeed/copilot/fix-fake-tls-issue

Fix Fake-TLS (EE mode) rejected when domain option specified

Author: dvershinin

.gitignore

@@ -3,3 +3,4 @@ dep
 .idea
 proxy-multi.conf
 proxy-secret
+_codeql_detected_source_root

net/net-tcp-rpc-ext-server.c

@@ -1315,8 +1315,8 @@ int tcp_rpcs_compact_parse_execute (connection_job_t C) {
         unsigned tag = *(unsigned *)(random_header + 56);
 
         if (tag == 0xdddddddd || ((tag == 0xeeeeeeee || tag == 0xefefefef) && !ext_rand_pad_only)) {
-          if (tag != 0xdddddddd && allow_only_tls) {
-            vkprintf (1, "Expected random padding mode\n");
+          if (tag == 0xdddddddd && allow_only_tls) {
+            vkprintf (1, "Expected Fake-TLS mode (EE/EF), got random padding mode (DD)\n");
             RETURN_TLS_ERROR(default_domain_info);
           }
           assert (rwm_skip_data (&c->in, 64) == 64);