Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 9085:0af598651e33 quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Merged with the default branch.
author Sergey Kandaurov <pluknet@nginx.com>
date Wed, 29 Mar 2023 11:14:25 +0400
parents 0f4f781e57c1 b7d4bfd132d2
children 85abf534cead
comparison
equal deleted inserted replaced
9084:efd91f6afa8d 9085:0af598651e33
3391 } 3391 }
3392 } 3392 }
3393 3393
3394 } else if (sslerr == SSL_ERROR_SSL) { 3394 } else if (sslerr == SSL_ERROR_SSL) {
3395 3395
3396 n = ERR_GET_REASON(ERR_peek_error()); 3396 n = ERR_GET_REASON(ERR_peek_last_error());
3397 3397
3398 /* handshake failures */ 3398 /* handshake failures */
3399 if (n == SSL_R_BAD_CHANGE_CIPHER_SPEC /* 103 */ 3399 if (n == SSL_R_BAD_CHANGE_CIPHER_SPEC /* 103 */
3400 #ifdef SSL_R_NO_SUITABLE_KEY_SHARE 3400 #ifdef SSL_R_NO_SUITABLE_KEY_SHARE
3401 || n == SSL_R_NO_SUITABLE_KEY_SHARE /* 101 */ 3401 || n == SSL_R_NO_SUITABLE_KEY_SHARE /* 101 */
3402 #endif 3402 #endif
3403 #ifdef SSL_R_BAD_ALERT
3404 || n == SSL_R_BAD_ALERT /* 102 */
3405 #endif
3403 #ifdef SSL_R_BAD_KEY_SHARE 3406 #ifdef SSL_R_BAD_KEY_SHARE
3404 || n == SSL_R_BAD_KEY_SHARE /* 108 */ 3407 || n == SSL_R_BAD_KEY_SHARE /* 108 */
3405 #endif 3408 #endif
3406 #ifdef SSL_R_BAD_EXTENSION 3409 #ifdef SSL_R_BAD_EXTENSION
3407 || n == SSL_R_BAD_EXTENSION /* 110 */ 3410 || n == SSL_R_BAD_EXTENSION /* 110 */
3408 #endif 3411 #endif
3412 || n == SSL_R_BAD_DIGEST_LENGTH /* 111 */
3413 #ifdef SSL_R_MISSING_SIGALGS_EXTENSION
3414 || n == SSL_R_MISSING_SIGALGS_EXTENSION /* 112 */
3415 #endif
3416 || n == SSL_R_BAD_PACKET_LENGTH /* 115 */
3409 #ifdef SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM 3417 #ifdef SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM
3410 || n == SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM /* 118 */ 3418 || n == SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM /* 118 */
3411 #endif 3419 #endif
3420 #ifdef SSL_R_BAD_KEY_UPDATE
3421 || n == SSL_R_BAD_KEY_UPDATE /* 122 */
3422 #endif
3412 || n == SSL_R_BLOCK_CIPHER_PAD_IS_WRONG /* 129 */ 3423 || n == SSL_R_BLOCK_CIPHER_PAD_IS_WRONG /* 129 */
3424 || n == SSL_R_CCS_RECEIVED_EARLY /* 133 */
3425 #ifdef SSL_R_DECODE_ERROR
3426 || n == SSL_R_DECODE_ERROR /* 137 */
3427 #endif
3428 #ifdef SSL_R_DATA_BETWEEN_CCS_AND_FINISHED
3429 || n == SSL_R_DATA_BETWEEN_CCS_AND_FINISHED /* 145 */
3430 #endif
3431 || n == SSL_R_DATA_LENGTH_TOO_LONG /* 146 */
3413 || n == SSL_R_DIGEST_CHECK_FAILED /* 149 */ 3432 || n == SSL_R_DIGEST_CHECK_FAILED /* 149 */
3433 || n == SSL_R_ENCRYPTED_LENGTH_TOO_LONG /* 150 */
3414 || n == SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST /* 151 */ 3434 || n == SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST /* 151 */
3415 || n == SSL_R_EXCESSIVE_MESSAGE_SIZE /* 152 */ 3435 || n == SSL_R_EXCESSIVE_MESSAGE_SIZE /* 152 */
3436 #ifdef SSL_R_GOT_A_FIN_BEFORE_A_CCS
3437 || n == SSL_R_GOT_A_FIN_BEFORE_A_CCS /* 154 */
3438 #endif
3416 || n == SSL_R_HTTPS_PROXY_REQUEST /* 155 */ 3439 || n == SSL_R_HTTPS_PROXY_REQUEST /* 155 */
3417 || n == SSL_R_HTTP_REQUEST /* 156 */ 3440 || n == SSL_R_HTTP_REQUEST /* 156 */
3418 || n == SSL_R_LENGTH_MISMATCH /* 159 */ 3441 || n == SSL_R_LENGTH_MISMATCH /* 159 */
3442 #ifdef SSL_R_LENGTH_TOO_SHORT
3443 || n == SSL_R_LENGTH_TOO_SHORT /* 160 */
3444 #endif
3445 #ifdef SSL_R_NO_RENEGOTIATION
3446 || n == SSL_R_NO_RENEGOTIATION /* 182 */
3447 #endif
3419 #ifdef SSL_R_NO_CIPHERS_PASSED 3448 #ifdef SSL_R_NO_CIPHERS_PASSED
3420 || n == SSL_R_NO_CIPHERS_PASSED /* 182 */ 3449 || n == SSL_R_NO_CIPHERS_PASSED /* 182 */
3421 #endif 3450 #endif
3422 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */ 3451 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */
3423 #ifdef SSL_R_BAD_CIPHER 3452 #ifdef SSL_R_BAD_CIPHER
3424 || n == SSL_R_BAD_CIPHER /* 186 */ 3453 || n == SSL_R_BAD_CIPHER /* 186 */
3425 #endif 3454 #endif
3426 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */ 3455 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */
3427 || n == SSL_R_NO_SHARED_CIPHER /* 193 */ 3456 || n == SSL_R_NO_SHARED_CIPHER /* 193 */
3457 #ifdef SSL_R_PACKET_LENGTH_TOO_LONG
3458 || n == SSL_R_PACKET_LENGTH_TOO_LONG /* 198 */
3459 #endif
3428 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ 3460 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */
3461 #ifdef SSL_R_TOO_MANY_WARNING_ALERTS
3462 || n == SSL_R_TOO_MANY_WARNING_ALERTS /* 220 */
3463 #endif
3429 #ifdef SSL_R_CLIENTHELLO_TLSEXT 3464 #ifdef SSL_R_CLIENTHELLO_TLSEXT
3430 || n == SSL_R_CLIENTHELLO_TLSEXT /* 226 */ 3465 || n == SSL_R_CLIENTHELLO_TLSEXT /* 226 */
3431 #endif 3466 #endif
3432 #ifdef SSL_R_PARSE_TLSEXT 3467 #ifdef SSL_R_PARSE_TLSEXT
3433 || n == SSL_R_PARSE_TLSEXT /* 227 */ 3468 || n == SSL_R_PARSE_TLSEXT /* 227 */
3434 #endif 3469 #endif
3435 #ifdef SSL_R_CALLBACK_FAILED 3470 #ifdef SSL_R_CALLBACK_FAILED
3436 || n == SSL_R_CALLBACK_FAILED /* 234 */ 3471 || n == SSL_R_CALLBACK_FAILED /* 234 */
3472 #endif
3473 #ifdef SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG
3474 || n == SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG /* 234 */
3437 #endif 3475 #endif
3438 #ifdef SSL_R_NO_APPLICATION_PROTOCOL 3476 #ifdef SSL_R_NO_APPLICATION_PROTOCOL
3439 || n == SSL_R_NO_APPLICATION_PROTOCOL /* 235 */ 3477 || n == SSL_R_NO_APPLICATION_PROTOCOL /* 235 */
3440 #endif 3478 #endif
3441 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */ 3479 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */
3443 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */ 3481 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */
3444 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */ 3482 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */
3445 #ifdef SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS 3483 #ifdef SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS
3446 || n == SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS /* 253 */ 3484 || n == SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS /* 253 */
3447 #endif 3485 #endif
3486 #ifdef SSL_R_INVALID_COMPRESSION_LIST
3487 || n == SSL_R_INVALID_COMPRESSION_LIST /* 256 */
3488 #endif
3489 #ifdef SSL_R_MISSING_KEY_SHARE
3490 || n == SSL_R_MISSING_KEY_SHARE /* 258 */
3491 #endif
3448 || n == SSL_R_UNSUPPORTED_PROTOCOL /* 258 */ 3492 || n == SSL_R_UNSUPPORTED_PROTOCOL /* 258 */
3449 #ifdef SSL_R_NO_SHARED_GROUP 3493 #ifdef SSL_R_NO_SHARED_GROUP
3450 || n == SSL_R_NO_SHARED_GROUP /* 266 */ 3494 || n == SSL_R_NO_SHARED_GROUP /* 266 */
3451 #endif 3495 #endif
3452 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */ 3496 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */
3497 #ifdef SSL_R_TOO_MUCH_SKIPPED_EARLY_DATA
3498 || n == SSL_R_TOO_MUCH_SKIPPED_EARLY_DATA /* 270 */
3499 #endif
3500 || n == SSL_R_BAD_LENGTH /* 271 */
3453 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */ 3501 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */
3454 #ifdef SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY 3502 #ifdef SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY
3455 || n == SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY /* 291 */ 3503 || n == SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY /* 291 */
3456 #endif 3504 #endif
3457 #ifdef SSL_R_APPLICATION_DATA_ON_SHUTDOWN 3505 #ifdef SSL_R_APPLICATION_DATA_ON_SHUTDOWN
3458 || n == SSL_R_APPLICATION_DATA_ON_SHUTDOWN /* 291 */ 3506 || n == SSL_R_APPLICATION_DATA_ON_SHUTDOWN /* 291 */
3507 #endif
3508 #ifdef SSL_R_BAD_LEGACY_VERSION
3509 || n == SSL_R_BAD_LEGACY_VERSION /* 292 */
3510 #endif
3511 #ifdef SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA
3512 || n == SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA /* 293 */
3513 #endif
3514 #ifdef SSL_R_RECORD_TOO_SMALL
3515 || n == SSL_R_RECORD_TOO_SMALL /* 298 */
3516 #endif
3517 #ifdef SSL_R_SSL3_SESSION_ID_TOO_LONG
3518 || n == SSL_R_SSL3_SESSION_ID_TOO_LONG /* 300 */
3459 #endif 3519 #endif
3460 #ifdef SSL_R_BAD_ECPOINT 3520 #ifdef SSL_R_BAD_ECPOINT
3461 || n == SSL_R_BAD_ECPOINT /* 306 */ 3521 || n == SSL_R_BAD_ECPOINT /* 306 */
3462 #endif 3522 #endif
3463 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG 3523 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG
3472 || n == SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING /* 345 */ 3532 || n == SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING /* 345 */
3473 #endif 3533 #endif
3474 #ifdef SSL_R_INAPPROPRIATE_FALLBACK 3534 #ifdef SSL_R_INAPPROPRIATE_FALLBACK
3475 || n == SSL_R_INAPPROPRIATE_FALLBACK /* 373 */ 3535 || n == SSL_R_INAPPROPRIATE_FALLBACK /* 373 */
3476 #endif 3536 #endif
3537 #ifdef SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS
3538 || n == SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS /* 376 */
3539 #endif
3540 #ifdef SSL_R_NO_SHARED_SIGATURE_ALGORITHMS
3541 || n == SSL_R_NO_SHARED_SIGATURE_ALGORITHMS /* 376 */
3542 #endif
3477 #ifdef SSL_R_CERT_CB_ERROR 3543 #ifdef SSL_R_CERT_CB_ERROR
3478 || n == SSL_R_CERT_CB_ERROR /* 377 */ 3544 || n == SSL_R_CERT_CB_ERROR /* 377 */
3479 #endif 3545 #endif
3480 #ifdef SSL_R_VERSION_TOO_LOW 3546 #ifdef SSL_R_VERSION_TOO_LOW
3481 || n == SSL_R_VERSION_TOO_LOW /* 396 */ 3547 || n == SSL_R_VERSION_TOO_LOW /* 396 */
3548 #endif
3549 #ifdef SSL_R_TOO_MANY_WARN_ALERTS
3550 || n == SSL_R_TOO_MANY_WARN_ALERTS /* 409 */
3482 #endif 3551 #endif
3483 #ifdef SSL_R_BAD_RECORD_TYPE 3552 #ifdef SSL_R_BAD_RECORD_TYPE
3484 || n == SSL_R_BAD_RECORD_TYPE /* 443 */ 3553 || n == SSL_R_BAD_RECORD_TYPE /* 443 */
3485 #endif 3554 #endif
3486 || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */ 3555 || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */