diff options
| author | Igor Sysoev <igor@sysoev.ru> | 2008-03-18 10:35:00 +0000 |
|---|---|---|
| committer | Igor Sysoev <igor@sysoev.ru> | 2008-03-18 10:35:00 +0000 |
| commit | 8da1fa935f1402dfb1542aaf534bc983c12be319 (patch) | |
| tree | 9c90b6b2685791fa88f4c30db83782ab49f8862e | |
| parent | 9ff26ce124b9b09af448bb1cdc70d0e7d2a80539 (diff) | |
| download | nginx-8da1fa935f1402dfb1542aaf534bc983c12be319.tar.gz nginx-8da1fa935f1402dfb1542aaf534bc983c12be319.zip | |
low some SSL handshake errors level
| -rw-r--r-- | src/event/ngx_event_openssl.c | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index 9f964dabe..436237857 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -1155,11 +1155,21 @@ ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err, n = ERR_GET_REASON(ERR_peek_error()); /* handshake failures */ - if (n == SSL_R_NO_SHARED_CIPHER + if (n == SSL_R_DIGEST_CHECK_FAILED + || n == SSL_R_NO_SHARED_CIPHER || n == SSL_R_UNEXPECTED_MESSAGE || n == SSL_R_WRONG_VERSION_NUMBER + || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */ + || n == SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE + || n == SSL_R_SSLV3_ALERT_BAD_RECORD_MAC + || n == SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE + || n == SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE + || n == SSL_R_SSLV3_ALERT_BAD_CERTIFICATE + || n == SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE + || n == SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED || n == SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED + || n == SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN || n == SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER || n == SSL_R_TLSV1_ALERT_UNKNOWN_CA) { |