comparison src/event/ngx_event_openssl.c @ 1876:5d663752fd96

low SSL handshake errors level
author Igor Sysoev <igor@sysoev.ru>
date Fri, 01 Feb 2008 14:05:18 +0000
parents 5d076348c121
children a55876dff8f5
comparison
equal deleted inserted replaced
1875:c11d96cbad75 1876:5d663752fd96
1113 1113
1114 static void 1114 static void
1115 ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err, 1115 ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err,
1116 char *text) 1116 char *text)
1117 { 1117 {
1118 int n;
1118 ngx_uint_t level; 1119 ngx_uint_t level;
1119 1120
1120 level = NGX_LOG_CRIT; 1121 level = NGX_LOG_CRIT;
1121 1122
1122 if (sslerr == SSL_ERROR_SYSCALL) { 1123 if (sslerr == SSL_ERROR_SYSCALL) {
1130 || err == NGX_ECONNREFUSED 1131 || err == NGX_ECONNREFUSED
1131 || err == NGX_ENETDOWN 1132 || err == NGX_ENETDOWN
1132 || err == NGX_ENETUNREACH 1133 || err == NGX_ENETUNREACH
1133 || err == NGX_EHOSTDOWN 1134 || err == NGX_EHOSTDOWN
1134 || err == NGX_EHOSTUNREACH) 1135 || err == NGX_EHOSTUNREACH)
1136 {
1137 switch (c->log_error) {
1138
1139 case NGX_ERROR_IGNORE_ECONNRESET:
1140 case NGX_ERROR_INFO:
1141 level = NGX_LOG_INFO;
1142 break;
1143
1144 case NGX_ERROR_ERR:
1145 level = NGX_LOG_ERR;
1146 break;
1147
1148 default:
1149 break;
1150 }
1151 }
1152
1153 } else if (sslerr == SSL_ERROR_SSL) {
1154
1155 n = ERR_GET_REASON(ERR_peek_error());
1156
1157 /* handshake failures */
1158 if (n == SSL_R_NO_SHARED_CIPHER
1159 || n == SSL_R_UNEXPECTED_MESSAGE
1160 || n == SSL_R_WRONG_VERSION_NUMBER
1161 || n == SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED
1162 || n == SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER
1163 || n == SSL_R_TLSV1_ALERT_UNKNOWN_CA)
1135 { 1164 {
1136 switch (c->log_error) { 1165 switch (c->log_error) {
1137 1166
1138 case NGX_ERROR_IGNORE_ECONNRESET: 1167 case NGX_ERROR_IGNORE_ECONNRESET:
1139 case NGX_ERROR_INFO: 1168 case NGX_ERROR_INFO: