]> git.kaiwu.me - nginx.git/commit
SSL: logging levels of errors observed with tlsfuzzer and LibreSSL.
authorMaxim Dounin <mdounin@mdounin.ru>
Wed, 8 Mar 2023 19:22:34 +0000 (22:22 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Wed, 8 Mar 2023 19:22:34 +0000 (22:22 +0300)
commit13987c88c354cfafa5334f8ed9b478517b71ce9d
tree0bd75036f92732b9aa79e71abb46be7a9a99e10b
parenta3a94f7534f4cc0c29e059f639a949c30353ef71
SSL: logging levels of errors observed with tlsfuzzer and LibreSSL.

As tested with tlsfuzzer with LibreSSL 3.7.0, the following errors are
certainly client-related:

SSL_do_handshake() failed (SSL: error:14026073:SSL routines:ACCEPT_SR_CLNT_HELLO:bad packet length)
SSL_do_handshake() failed (SSL: error:1402612C:SSL routines:ACCEPT_SR_CLNT_HELLO:ssl3 session id too long)
SSL_do_handshake() failed (SSL: error:140380EA:SSL routines:ACCEPT_SR_KEY_EXCH:tls rsa encrypted value length is wrong)

Accordingly, the SSL_R_BAD_PACKET_LENGTH ("bad packet length"),
SSL_R_SSL3_SESSION_ID_TOO_LONG ("ssl3 session id too long"),
SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG ("tls rsa encrypted value
length is wrong") errors are now logged at the "info" level.
src/event/ngx_event_openssl.c