Upstream: reliably detect connection failures with SSL peers.

diff --git a/src/http/ngx_http_upstream.c b/src/http/ngx_http_upstream.c
index cd946340a8cc20cbb41098dfdc4b90abeb4ff4fc..9e2830d07d50b8a7b4562bdb5330086f8e3b9461 100644 (file)
--- a/src/http/ngx_http_upstream.c
+++ b/src/http/ngx_http_upstream.c
@@ -1282,6 +1282,11 @@ ngx_http_upstream_ssl_init_connection(ngx_http_request_t *r,
 {
     ngx_int_t   rc;
 
+    if (ngx_http_upstream_test_connect(c) != NGX_OK) {
+        ngx_http_upstream_next(r, u, NGX_HTTP_UPSTREAM_FT_ERROR);
+        return;
+    }
+
     if (ngx_ssl_create_connection(u->conf->ssl, c,
                                   NGX_SSL_BUFFER|NGX_SSL_CLIENT)
         != NGX_OK)