# HG changeset patch
# User Ruslan Ermilov <ru@nginx.com>
# Date 1375089796 -14400
# Node ID 12b750d351620e483f7c3d69dafac3bf4d20f3f5
# Parent  d3eab5e2df5f38ba0e47c490e5fcbee68ad9f27b
Upstream: reliably detect connection failures with SSL peers.

diff --git a/src/http/ngx_http_upstream.c b/src/http/ngx_http_upstream.c
--- a/src/http/ngx_http_upstream.c
+++ b/src/http/ngx_http_upstream.c
@@ -1282,6 +1282,11 @@ ngx_http_upstream_ssl_init_connection(ng
 {
     ngx_int_t   rc;
 
+    if (ngx_http_upstream_test_connect(c) != NGX_OK) {
+        ngx_http_upstream_next(r, u, NGX_HTTP_UPSTREAM_FT_ERROR);
+        return;
+    }
+
     if (ngx_ssl_create_connection(u->conf->ssl, c,
                                   NGX_SSL_BUFFER|NGX_SSL_CLIENT)
         != NGX_OK)