]> git.kaiwu.me - nginx.git/commitdiff
SSL: logging level of the "ech_required" TLS alert.
authorRoman Arutyunyan <arut@nginx.com>
Tue, 16 Dec 2025 13:53:12 +0000 (17:53 +0400)
committerRoman Arutyunyan <arutyunyan.roman@gmail.com>
Wed, 17 Dec 2025 09:49:06 +0000 (13:49 +0400)
The alert is send by a client after its ECH configuration was rejected by
a server.

src/event/ngx_event_openssl.c

index d7a514852443a9c3bc1b71868af65e82623eff42..d1386d3a6df35c4c24bf61da43880d0c46c59352 100644 (file)
@@ -4012,6 +4012,7 @@ ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err,
             || n == SSL_R_TLSV1_ALERT_USER_CANCELLED                 /* 1090 */
             || n == SSL_R_TLSV1_ALERT_NO_RENEGOTIATION               /* 1100 */
 #endif
+            || n == 1121 /* SSL_R_TLSV1_ALERT_ECH_REQUIRED */
             )
         {
             switch (c->log_error) {