From aa09c199921fd104b42c234085146caa9c10b0c3 Mon Sep 17 00:00:00 2001 From: Maxim Dounin Date: Mon, 6 May 2024 00:07:18 +0300 Subject: SSL: logging level of "invalid alert" errors. The SSL_R_INVALID_ALERT ("invalid alert") errors are reported by OpenSSL 1.1.1 or newer if the client sends a malformed alert. These errors are now logged at the "info" level. Signed-off-by: Aleksei Bavshin Origin: --- src/event/ngx_event_openssl.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src') diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index a466ec2b9..74b2b0066 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c @@ -3897,6 +3897,9 @@ ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err, || n == SSL_R_NO_SHARED_CIPHER /* 193 */ #ifdef SSL_R_PACKET_LENGTH_TOO_LONG || n == SSL_R_PACKET_LENGTH_TOO_LONG /* 198 */ +#endif +#ifdef SSL_R_INVALID_ALERT + || n == SSL_R_INVALID_ALERT /* 205 */ #endif || n == SSL_R_RECORD_LENGTH_MISMATCH /* 213 */ #ifdef SSL_R_TOO_MANY_WARNING_ALERTS -- cgit