Mercurial > hg > nginx
comparison src/event/ngx_event_openssl.c @ 7472:d430babbe643
SSL: server name callback changed to return fatal errors.
Notably this affects various allocation errors, and should generally
improve things if an allocation error actually happens during a callback.
Depending on the OpenSSL version, returning an error can result in
either SSL_R_CALLBACK_FAILED or SSL_R_CLIENTHELLO_TLSEXT error from
SSL_do_handshake(), so both errors were switched to the "info" level.
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Sun, 03 Mar 2019 16:48:06 +0300 |
| parents | 6708bec13757 |
| children | 3f1db95d758a |
comparison
equal
deleted
inserted
replaced
| 7471:7e8bcba6d039 | 7472:d430babbe643 |
|---|---|
| 2853 #endif | 2853 #endif |
| 2854 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */ | 2854 || n == SSL_R_NO_CIPHERS_SPECIFIED /* 183 */ |
| 2855 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */ | 2855 || n == SSL_R_NO_COMPRESSION_SPECIFIED /* 187 */ |
| 2856 || n == SSL_R_NO_SHARED_CIPHER /* 193 */ | 2856 || n == SSL_R_NO_SHARED_CIPHER /* 193 */ |
| 2857 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ | 2857 || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ |
| 2858 #ifdef SSL_R_CLIENTHELLO_TLSEXT | |
| 2859 || n == SSL_R_CLIENTHELLO_TLSEXT /* 226 */ | |
| 2860 #endif | |
| 2858 #ifdef SSL_R_PARSE_TLSEXT | 2861 #ifdef SSL_R_PARSE_TLSEXT |
| 2859 || n == SSL_R_PARSE_TLSEXT /* 227 */ | 2862 || n == SSL_R_PARSE_TLSEXT /* 227 */ |
| 2863 #endif | |
| 2864 #ifdef SSL_R_CALLBACK_FAILED | |
| 2865 || n == SSL_R_CALLBACK_FAILED /* 234 */ | |
| 2860 #endif | 2866 #endif |
| 2861 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */ | 2867 || n == SSL_R_UNEXPECTED_MESSAGE /* 244 */ |
| 2862 || n == SSL_R_UNEXPECTED_RECORD /* 245 */ | 2868 || n == SSL_R_UNEXPECTED_RECORD /* 245 */ |
| 2863 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */ | 2869 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */ |
| 2864 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */ | 2870 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */ |