Mercurial > hg > nginx
comparison src/event/ngx_event_openssl.c @ 9085:0af598651e33 quic
Merged with the default branch.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Wed, 29 Mar 2023 11:14:25 +0400 |
parents | 0f4f781e57c1 b7d4bfd132d2 |
children | 85abf534cead |
comparison
equal
deleted
inserted
replaced
9084:efd91f6afa8d | 9085:0af598651e33 |
---|---|
3391 } | 3391 } |
3392 } | 3392 } |
3393 | 3393 |
3394 } else if (sslerr == SSL_ERROR_SSL) { | 3394 } else if (sslerr == SSL_ERROR_SSL) { |
3395 | 3395 |
3396 n = ERR_GET_REASON(ERR_peek_error()); | 3396 n = ERR_GET_REASON(ERR_peek_last_error()); |
3397 | 3397 |
3398 /* handshake failures */ | 3398 /* handshake failures */ |
3399 if (n == SSL_R_BAD_CHANGE_CIPHER_SPEC /* 103 */ | 3399 if (n == SSL_R_BAD_CHANGE_CIPHER_SPEC /* 103 */ |
3400 #ifdef SSL_R_NO_SUITABLE_KEY_SHARE | 3400 #ifdef SSL_R_NO_SUITABLE_KEY_SHARE |
3401 || n == SSL_R_NO_SUITABLE_KEY_SHARE /* 101 */ | 3401 || n == SSL_R_NO_SUITABLE_KEY_SHARE /* 101 */ |
3402 #endif | 3402 #endif |
3403 #ifdef SSL_R_BAD_ALERT | |
3404 || n == SSL_R_BAD_ALERT /* 102 */ | |
3405 #endif | |
3403 #ifdef SSL_R_BAD_KEY_SHARE | 3406 #ifdef SSL_R_BAD_KEY_SHARE |
3404 || n == SSL_R_BAD_KEY_SHARE /* 108 */ | 3407 || n == SSL_R_BAD_KEY_SHARE /* 108 */ |
3405 #endif | 3408 #endif |
3406 #ifdef SSL_R_BAD_EXTENSION | 3409 #ifdef SSL_R_BAD_EXTENSION |
3407 || n == SSL_R_BAD_EXTENSION /* 110 */ | 3410 || n == SSL_R_BAD_EXTENSION /* 110 */ |
3408 #endif | 3411 #endif |
3412 || n == SSL_R_BAD_DIGEST_LENGTH /* 111 */ | |
3413 #ifdef SSL_R_MISSING_SIGALGS_EXTENSION | |
3414 || n == SSL_R_MISSING_SIGALGS_EXTENSION /* 112 */ | |
3415 #endif | |
3416 || n == SSL_R_BAD_PACKET_LENGTH /* 115 */ | |
3409 #ifdef SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM | 3417 #ifdef SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM |
3410 || n == SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM /* 118 */ | 3418 || n == SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM /* 118 */ |
3411 #endif | 3419 #endif |
3420 #ifdef SSL_R_BAD_KEY_UPDATE | |
3421 || n == SSL_R_BAD_KEY_UPDATE /* 122 */ | |
3422 #endif | |
3412 || n == SSL_R_BLOCK_CIPHER_PAD_IS_WRONG /* 129 */ | 3423 || n == SSL_R_BLOCK_CIPHER_PAD_IS_WRONG /* 129 */ |
3424 || n == SSL_R_CCS_RECEIVED_EARLY /* 133 */ | |
3425 #ifdef SSL_R_DECODE_ERROR | |
3426 || n == SSL_R_DECODE_ERROR /* 137 */ | |
3427 #endif | |
3428 #ifdef SSL_R_DATA_BETWEEN_CCS_AND_FINISHED | |
3429 || n == SSL_R_DATA_BETWEEN_CCS_AND_FINISHED /* 145 */ | |
3430 #endif | |
3431 || n == SSL_R_DATA_LENGTH_TOO_LONG /* 146 */ | |
3413 || n == SSL_R_DIGEST_CHECK_FAILED /* 149 */ | 3432 || n == SSL_R_DIGEST_CHECK_FAILED /* 149 */ |
3433 || n == SSL_R_ENCRYPTED_LENGTH_TOO_LONG /* 150 */ | |
3414 || n == SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST /* 151 */ | 3434 || n == SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST /* 151 */ |
3415 || n == SSL_R_EXCESSIVE_MESSAGE_SIZE /* 152 */ | 3435 || n == SSL_R_EXCESSIVE_MESSAGE_SIZE /* 152 */ |
3436 #ifdef SSL_R_GOT_A_FIN_BEFORE_A_CCS | |
3437 || n == SSL_R_GOT_A_FIN_BEFORE_A_CCS /* 154 */ | |
3438 #endif | |
3416 || n == SSL_R_HTTPS_PROXY_REQUEST /* 155 */ | 3439 || n == SSL_R_HTTPS_PROXY_REQUEST /* 155 */ |
3417 || n == SSL_R_HTTP_REQUEST /* 156 */ | 3440 || n == SSL_R_HTTP_REQUEST /* 156 */ |
3418 || n == SSL_R_LENGTH_MISMATCH /* 159 */ | 3441 || n == SSL_R_LENGTH_MISMATCH /* 159 */ |
3442 #ifdef SSL_R_LENGTH_TOO_SHORT | |
3443 || n == SSL_R_LENGTH_TOO_SHORT /* 160 */ | |
3444 #endif | |
3445 #ifdef SSL_R_NO_RENEGOTIATION | |
3446 || n == SSL_R_NO_RENEGOTIATION /* 182 */ | |
3447 #endif | |
3419 #ifdef SSL_R_NO_CIPHERS_PASSED | 3448 #ifdef SSL_R_NO_CIPHERS_PASSED |
3420 || n == SSL_R_NO_CIPHERS_PASSED /* 182 */ | 3449 || n == SSL_R_NO_CIPHERS_PASSED /* 182 */ |
3421 #endif | 3450 #endif |
3422 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */ | 3451 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */ |
3423 #ifdef SSL_R_BAD_CIPHER | 3452 #ifdef SSL_R_BAD_CIPHER |
3424 || n == SSL_R_BAD_CIPHER /* 186 */ | 3453 || n == SSL_R_BAD_CIPHER /* 186 */ |
3425 #endif | 3454 #endif |
3426 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */ | 3455 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */ |
3427 || n == SSL_R_NO_SHARED_CIPHER /* 193 */ | 3456 || n == SSL_R_NO_SHARED_CIPHER /* 193 */ |
3457 #ifdef SSL_R_PACKET_LENGTH_TOO_LONG | |
3458 || n == SSL_R_PACKET_LENGTH_TOO_LONG /* 198 */ | |
3459 #endif | |
3428 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ | 3460 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ |
3461 #ifdef SSL_R_TOO_MANY_WARNING_ALERTS | |
3462 || n == SSL_R_TOO_MANY_WARNING_ALERTS /* 220 */ | |
3463 #endif | |
3429 #ifdef SSL_R_CLIENTHELLO_TLSEXT | 3464 #ifdef SSL_R_CLIENTHELLO_TLSEXT |
3430 || n == SSL_R_CLIENTHELLO_TLSEXT /* 226 */ | 3465 || n == SSL_R_CLIENTHELLO_TLSEXT /* 226 */ |
3431 #endif | 3466 #endif |
3432 #ifdef SSL_R_PARSE_TLSEXT | 3467 #ifdef SSL_R_PARSE_TLSEXT |
3433 || n == SSL_R_PARSE_TLSEXT /* 227 */ | 3468 || n == SSL_R_PARSE_TLSEXT /* 227 */ |
3434 #endif | 3469 #endif |
3435 #ifdef SSL_R_CALLBACK_FAILED | 3470 #ifdef SSL_R_CALLBACK_FAILED |
3436 || n == SSL_R_CALLBACK_FAILED /* 234 */ | 3471 || n == SSL_R_CALLBACK_FAILED /* 234 */ |
3472 #endif | |
3473 #ifdef SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG | |
3474 || n == SSL_R_TLS_RSA_ENCRYPTED_VALUE_LENGTH_IS_WRONG /* 234 */ | |
3437 #endif | 3475 #endif |
3438 #ifdef SSL_R_NO_APPLICATION_PROTOCOL | 3476 #ifdef SSL_R_NO_APPLICATION_PROTOCOL |
3439 || n == SSL_R_NO_APPLICATION_PROTOCOL /* 235 */ | 3477 || n == SSL_R_NO_APPLICATION_PROTOCOL /* 235 */ |
3440 #endif | 3478 #endif |
3441 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */ | 3479 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */ |
3443 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */ | 3481 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */ |
3444 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */ | 3482 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */ |
3445 #ifdef SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS | 3483 #ifdef SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS |
3446 || n == SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS /* 253 */ | 3484 || n == SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS /* 253 */ |
3447 #endif | 3485 #endif |
3486 #ifdef SSL_R_INVALID_COMPRESSION_LIST | |
3487 || n == SSL_R_INVALID_COMPRESSION_LIST /* 256 */ | |
3488 #endif | |
3489 #ifdef SSL_R_MISSING_KEY_SHARE | |
3490 || n == SSL_R_MISSING_KEY_SHARE /* 258 */ | |
3491 #endif | |
3448 || n == SSL_R_UNSUPPORTED_PROTOCOL /* 258 */ | 3492 || n == SSL_R_UNSUPPORTED_PROTOCOL /* 258 */ |
3449 #ifdef SSL_R_NO_SHARED_GROUP | 3493 #ifdef SSL_R_NO_SHARED_GROUP |
3450 || n == SSL_R_NO_SHARED_GROUP /* 266 */ | 3494 || n == SSL_R_NO_SHARED_GROUP /* 266 */ |
3451 #endif | 3495 #endif |
3452 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */ | 3496 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */ |
3497 #ifdef SSL_R_TOO_MUCH_SKIPPED_EARLY_DATA | |
3498 || n == SSL_R_TOO_MUCH_SKIPPED_EARLY_DATA /* 270 */ | |
3499 #endif | |
3500 || n == SSL_R_BAD_LENGTH /* 271 */ | |
3453 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */ | 3501 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */ |
3454 #ifdef SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY | 3502 #ifdef SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY |
3455 || n == SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY /* 291 */ | 3503 || n == SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY /* 291 */ |
3456 #endif | 3504 #endif |
3457 #ifdef SSL_R_APPLICATION_DATA_ON_SHUTDOWN | 3505 #ifdef SSL_R_APPLICATION_DATA_ON_SHUTDOWN |
3458 || n == SSL_R_APPLICATION_DATA_ON_SHUTDOWN /* 291 */ | 3506 || n == SSL_R_APPLICATION_DATA_ON_SHUTDOWN /* 291 */ |
3507 #endif | |
3508 #ifdef SSL_R_BAD_LEGACY_VERSION | |
3509 || n == SSL_R_BAD_LEGACY_VERSION /* 292 */ | |
3510 #endif | |
3511 #ifdef SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA | |
3512 || n == SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA /* 293 */ | |
3513 #endif | |
3514 #ifdef SSL_R_RECORD_TOO_SMALL | |
3515 || n == SSL_R_RECORD_TOO_SMALL /* 298 */ | |
3516 #endif | |
3517 #ifdef SSL_R_SSL3_SESSION_ID_TOO_LONG | |
3518 || n == SSL_R_SSL3_SESSION_ID_TOO_LONG /* 300 */ | |
3459 #endif | 3519 #endif |
3460 #ifdef SSL_R_BAD_ECPOINT | 3520 #ifdef SSL_R_BAD_ECPOINT |
3461 || n == SSL_R_BAD_ECPOINT /* 306 */ | 3521 || n == SSL_R_BAD_ECPOINT /* 306 */ |
3462 #endif | 3522 #endif |
3463 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG | 3523 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG |
3472 || n == SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING /* 345 */ | 3532 || n == SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING /* 345 */ |
3473 #endif | 3533 #endif |
3474 #ifdef SSL_R_INAPPROPRIATE_FALLBACK | 3534 #ifdef SSL_R_INAPPROPRIATE_FALLBACK |
3475 || n == SSL_R_INAPPROPRIATE_FALLBACK /* 373 */ | 3535 || n == SSL_R_INAPPROPRIATE_FALLBACK /* 373 */ |
3476 #endif | 3536 #endif |
3537 #ifdef SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS | |
3538 || n == SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS /* 376 */ | |
3539 #endif | |
3540 #ifdef SSL_R_NO_SHARED_SIGATURE_ALGORITHMS | |
3541 || n == SSL_R_NO_SHARED_SIGATURE_ALGORITHMS /* 376 */ | |
3542 #endif | |
3477 #ifdef SSL_R_CERT_CB_ERROR | 3543 #ifdef SSL_R_CERT_CB_ERROR |
3478 || n == SSL_R_CERT_CB_ERROR /* 377 */ | 3544 || n == SSL_R_CERT_CB_ERROR /* 377 */ |
3479 #endif | 3545 #endif |
3480 #ifdef SSL_R_VERSION_TOO_LOW | 3546 #ifdef SSL_R_VERSION_TOO_LOW |
3481 || n == SSL_R_VERSION_TOO_LOW /* 396 */ | 3547 || n == SSL_R_VERSION_TOO_LOW /* 396 */ |
3548 #endif | |
3549 #ifdef SSL_R_TOO_MANY_WARN_ALERTS | |
3550 || n == SSL_R_TOO_MANY_WARN_ALERTS /* 409 */ | |
3482 #endif | 3551 #endif |
3483 #ifdef SSL_R_BAD_RECORD_TYPE | 3552 #ifdef SSL_R_BAD_RECORD_TYPE |
3484 || n == SSL_R_BAD_RECORD_TYPE /* 443 */ | 3553 || n == SSL_R_BAD_RECORD_TYPE /* 443 */ |
3485 #endif | 3554 #endif |
3486 || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */ | 3555 || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */ |