Mercurial > hg > nginx-quic
annotate docs/xml/change_log_conf.xml @ 8573:1a03af395f44
SSL: use of the SSL_OP_IGNORE_UNEXPECTED_EOF option.
A new behaviour was introduced in OpenSSL 1.1.1e, when a peer does not send
close_notify before closing the connection. Previously, it was to return
SSL_ERROR_SYSCALL with errno 0, known since at least OpenSSL 0.9.7, and is
handled gracefully in nginx. Now it returns SSL_ERROR_SSL with a distinct
reason SSL_R_UNEXPECTED_EOF_WHILE_READING ("unexpected eof while reading").
This leads to critical errors seen in nginx within various routines such as
SSL_do_handshake(), SSL_read(), SSL_shutdown(). The behaviour was restored
in OpenSSL 1.1.1f, but presents in OpenSSL 3.0 by default.
Use of the SSL_OP_IGNORE_UNEXPECTED_EOF option added in OpenSSL 3.0 allows
to set a compatible behaviour to return SSL_ERROR_ZERO_RETURN:
https://git.openssl.org/?p=openssl.git;a=commitdiff;h=09b90e0
See for additional details: https://github.com/openssl/openssl/issues/11381
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 10 Aug 2021 23:43:17 +0300 |
parents | 76bc29f06168 |
children |
rev | line source |
---|---|
4028
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
1 <?xml version="1.0" ?> |
450 | 2 <!DOCTYPE configuration SYSTEM "../dtd/change_log_conf.dtd" > |
3 | |
4 <configuration> | |
5 | |
483 | 6 <length>76</length> |
450 | 7 |
8 <start> *) </start> | |
9 <indent> </indent> | |
10 | |
11 <changes lang="ru"> | |
4028
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
12 <title>Изменения в </title> |
450 | 13 <length>66</length> |
14 | |
4028
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
15 <bugfix>Исправление</bugfix> |
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
16 <feature>Добавление</feature> |
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
17 <change>Изменение</change> |
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
18 <security>Безопасность</security> |
76bc29f06168
CHANGES conversion from KOI8-R to UTF-8.
Igor Sysoev <igor@sysoev.ru>
parents:
573
diff
changeset
|
19 <workaround>Изменение</workaround> |
450 | 20 </changes> |
21 | |
22 <changes lang="en"> | |
23 <title>Changes with </title> | |
24 <length>65</length> | |
25 | |
26 <bugfix>Bugfix</bugfix> | |
27 <feature>Feature</feature> | |
28 <change>Change</change> | |
573 | 29 <security>Security</security> |
450 | 30 <workaround>Workaround</workaround> |
31 | |
32 <month> Jan </month> | |
33 <month> Feb </month> | |
34 <month> Mar </month> | |
35 <month> Apr </month> | |
36 <month> May </month> | |
37 <month> Jun </month> | |
38 <month> Jul </month> | |
39 <month> Aug </month> | |
40 <month> Sep </month> | |
41 <month> Oct </month> | |
42 <month> Nov </month> | |
43 <month> Dec </month> | |
44 | |
45 </changes> | |
46 | |
47 </configuration> |