diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2023-03-08 22:22:34 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2023-03-08 22:22:34 +0300 |
| commit | 13987c88c354cfafa5334f8ed9b478517b71ce9d (patch) | |
| tree | 0bd75036f92732b9aa79e71abb46be7a9a99e10b /src/core/ngx_syslog.h | |
| parent | a3a94f7534f4cc0c29e059f639a949c30353ef71 (diff) | |
| download | nginx-13987c88c354cfafa5334f8ed9b478517b71ce9d.tar.gz nginx-13987c88c354cfafa5334f8ed9b478517b71ce9d.zip | |
SSL: logging levels of errors observed with tlsfuzzer and LibreSSL.
As tested with tlsfuzzer with LibreSSL 3.7.0, the following errors are
certainly client-related:
SSL_do_handshake() failed (SSL: error:14026073:SSL routines:ACCEPT_SR_CLNT_HELLO:bad packet length)
SSL_do_handshake() failed (SSL: error:1402612C:SSL routines:ACCEPT_SR_CLNT_HELLO:ssl3 session id too long)
SSL_do_handshake() failed (SSL: error:140380EA:SSL routines:ACCEPT_SR_KEY_EXCH:tls rsa encrypted value length is wrong)
Accordingly, the SSL_R_BAD_PACKET_LENGTH ("bad packet length"),
SSL_R_SSL3_SESSION_ID_TOO_LONG ("ssl3 session id too long"),
SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG ("tls rsa encrypted value
length is wrong") errors are now logged at the "info" level.
Diffstat (limited to 'src/core/ngx_syslog.h')
0 files changed, 0 insertions, 0 deletions