]> git.kaiwu.me - nginx.git/commitdiff
QUIC: improved ssl_reject_handshake error logging.
authorSergey Kandaurov <pluknet@nginx.com>
Thu, 23 Feb 2023 12:26:38 +0000 (16:26 +0400)
committerSergey Kandaurov <pluknet@nginx.com>
Thu, 23 Feb 2023 12:26:38 +0000 (16:26 +0400)
The check follows the ngx_ssl_handshake() change in 59e1c73fe02b.

src/event/quic/ngx_event_quic_ssl.c

index 2df38b3867f028bf3700cf8886e7521db19550b1..f23260d246c7d378ba9014e157e6ae1136fdf25c 100644 (file)
@@ -423,6 +423,14 @@ ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data)
                        sslerr);
 
         if (sslerr != SSL_ERROR_WANT_READ) {
+
+            if (c->ssl->handshake_rejected) {
+                ngx_connection_error(c, 0, "handshake rejected");
+                ERR_clear_error();
+
+                return NGX_ERROR;
+            }
+
             ngx_ssl_error(NGX_LOG_ERR, c->log, 0, "SSL_do_handshake() failed");
             return NGX_ERROR;
         }