Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 8009:a736a7a613ea

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: logging level of "application data after close notify". Such fatal errors are reported by OpenSSL 1.1.1, and similarly by BoringSSL, if application data is encountered during SSL shutdown, which started to be observed on the second SSL_shutdown() call after SSL shutdown fixes made in 09fb2135a589 (1.19.2). The error means that the client continues to send application data after receiving the "close_notify" alert (ticket #2318). Previously it was reported as SSL_shutdown() error of SSL_ERROR_SYSCALL.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 08 Feb 2022 17:35:27 +0300
parents e30f7dc7f143
children cac164d0807e ce6d9cf0f567
comparison
equal deleted inserted replaced
8008:1add55d23652 8009:a736a7a613ea
3383 #ifdef SSL_R_NO_SHARED_GROUP 3383 #ifdef SSL_R_NO_SHARED_GROUP
3384 || n == SSL_R_NO_SHARED_GROUP /* 266 */ 3384 || n == SSL_R_NO_SHARED_GROUP /* 266 */
3385 #endif 3385 #endif
3386 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */ 3386 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */
3387 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */ 3387 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */
3388 #ifdef SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY
3389 || n == SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY /* 291 */
3390 #endif
3391 #ifdef SSL_R_APPLICATION_DATA_ON_SHUTDOWN
3392 || n == SSL_R_APPLICATION_DATA_ON_SHUTDOWN /* 291 */
3393 #endif
3388 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG 3394 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG
3389 || n == SSL_R_RENEGOTIATE_EXT_TOO_LONG /* 335 */ 3395 || n == SSL_R_RENEGOTIATE_EXT_TOO_LONG /* 335 */
3390 || n == SSL_R_RENEGOTIATION_ENCODING_ERR /* 336 */ 3396 || n == SSL_R_RENEGOTIATION_ENCODING_ERR /* 336 */
3391 || n == SSL_R_RENEGOTIATION_MISMATCH /* 337 */ 3397 || n == SSL_R_RENEGOTIATION_MISMATCH /* 337 */
3392 #endif 3398 #endif